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Abstract 

Sound and complete axiomatizations are provided for a number of different logics involv- 
ing modalities for knowledge and time. These logics arise from different choices for various 
parameters. All the logics considered involve the discrete time linear temporal logic opera- 
tors 'next' and 'until' and an operator for the knowledge of each of a number of agents. Both 
the single agent and multiple agent cases are studied: in some instances of the latter there is 
also an operator for the common knowledge of the group of all agents. Four different seman- 
tic properties of agents are considered: whether they have a unique initial state, whether 
they operate synchronously, whether they have perfect recall, and whether they learn. The 
property of no learning essentially dual to perfect recall. Not all settings of these param- 
eters lead to recursively axiomatizable logics, but sound and complete axiomatizations are 
presented for all the ones that do. 
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1 Introduction 



It has recently been argued that knowledge is a useful tool for analyzing the behavior and 
interaction of agents in a distributed system (see [FHMV95] and the references therein). When 
analyzing a system in terms of knowledge, not only is the current state of knowledge of the 
agents in the system relevant, but also how that state of knowledge changes over time. A formal 
propositional logic of knowledge and time was first proposed by Sato [ 5at77 ] ; many others have 
since been proposed [ FHV91 , Leh84, [LR86| , PR85| , [5pa9C| ] . Unfortunately, while these logics 
often use similar or identical notation, they differ in a number of significant respects. 

In |HV8£], logics for knowledge and time were categorized along two major dimensions: the 
language used and the assumptions made on the underlying distributed system. The proper- 
ties of knowledge in a system turn out to depend in subtle ways on these assumptions. The 
assumptions considered in | HV89f | concern whether agents have unique initial states, operate 
synchronously or asynchronously, have perfect recall, and whether they satisfy a condition called 
no learning. There are 16 possible combinations of these assumptions on the underlying system. 
Together with 6 choices of language, this gives us 96 logics in all. All the logics considered in 
the papers mentioned above fit into the framework. In [ HV8S| , HV88a], the complexity of these 
logics is completely characterized; the results of these papers show how the subtle interplay 
of the parameters can have a tremendous impact on complexity. The complexity results show 
that some of these logics cannot be characterized axiomatically, since the set of valid formu- 
las for these logics is not recursively enumerable. Of these 96 logics, 48 involve linear time 
and 48 involve branching time. (The distinction between linear and branching time essentially 
amounts to whether or not we can quantify over the possible executions of a program.) To 
keep this paper to manageable length, we focus here on the linear time logics, and provide 
axiomatic characterizations of all the linear time logics for which an axiomatization is possible 
at all (i.e., for those logics for which the set of valid formulas is r.e.). 

The rest of this paper is organized as follows. In the next section, we provide formal 
definitions for the logics we consider. In Section [2|, we review the syntax and semantics of 
all the logics of knowledge and time that we consider here. In particular, we review the four 
assumptions on the underlying system that we axiomatize in this paper. In Section |3|, we state 
the axioms for all the systems. In Section ||, we introduce the notion of enriched systems, 
which form the basis for all our completeness proofs. In Section ||, we prove soundness and 
completeness for the axiom systems described in Section ||. The definition of no learning that 
we use here is slightly different from that used in [FHMV95, HV86], although they agree in 
many cases of interest. We discuss the motivation for our change in Section || We conclude 
with some further discussion in Section [?]. 



2 The Formal Model: Language and Systems 



The material in this section is largely taken from [HV89], and is repeated here to make this paper 
self-contained. The reader is encouraged to consult [HV89] for further details and motivation. 

The logics we are considering are all propositional. Thus, we start out with primitive 
propositions p, q, . . . and we close the logics under negation and conjunction, so that if tp and 
tjj are formulas, so are -*<p and ip A tp. In addition, we close off under modalities for knowledge 
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and time, as discussed below. As usual, we view true as an abbreviation for —i(p A ->p), ip V tp 
as an abbreviation for ^(^(p A ^tp), and (p => tp as an abbreviation for —up V tp. 

If we have m agents (in distributed systems applications, this would mean a system with m 
processors), we add the modalities K%, . . . , K m . Thus, if (p is a formula, so is Knp (read "agent 
i knows <p"). We take L^ip to be an abbreviation for —iKi—xp. In some cases we also want to 
talk about common knowledge, so we add the modalities E and C into the language; Ecp says 
that everyone knows tp, while C<p says <p is common knowledge. 

There are two basic temporal modalities (sometimes called operators or connectives): a 
unary operator O an d a binary operator U. Thus, if ip and tp are formulas, then so are Qtp 
(read "next time tp v ) and tpU tp (read "tp until tp"). 0</? is an abbreviation for trueU ip, while 
□</? is an abbreviation for —iO—np. Intuitively, Q(p says that tp is true at the next point (one 
time unit later), tpU ip says that ip holds until tp does, Otp says that tp is eventually true (either 
in the present or at some point in the future), and Hip says that tp is always true (in the present 
and at all points in the future). In | HV89[| , branching time operators are also considered, which 
have quantifiers over runs. For example, VO is a branching time operator such that VOv? is true 
when Qtp is true for all possible futures. Since we do not consider branching time operators 
in this paper, we omit the formal definition here. We take CKL m to be the language for m 
agents with all the modal operators for knowledge and linear time discussed above; KL m is the 
restricted version without the common knowledge operator. 

A system for m agents consists of a set 7Z of runs, where each run r G 1Z is a function 
from IN to L m+1 , where L is some set of local states. There is a local state for each agent, 
together with a local state for the environment; intuitively, the environment keeps track of all 
the relevant features of the system not described by the agents' local states, such as messages 
in transit but not yet delivered. Thus, r(n) has the form (l e , l±, . . . , l m ), where l e is the state 
of the environment, and l{ is the local state of agent i, for i = 1, . . . , m; such a tuple is called 
a global state. (Formally, we could view a system as a tuple (7Z,L,m), making the L and m 
explicit. We have chosen not to do so in order to simplify notation. The L and m should always 
be clear from context.) An interpreted system I for m agents is a tuple (TZ,tt) where TZ is a 
system for m agents, and tt maps every point (r,n) £ TZ x IV to a truth assignment ir(r, n) to 
the primitive propositions (so that n(r, n)(jp) G {true, false} for each primitive proposition p).[] 

We now give semantics to CKL m and KL m . Given an interpreted system Z = (TZ,tt), we 
write (I, r,n) \= (p if the formula <p is true at (or satisfied by) the point (r, n) of interpreted 
system X. We define |= inductively for formulas of CKL m (for KL m we just omit the clauses 
involving C and E). In order to give the semantics for formulas of the form Kitp, we need to 
introduce one new notion. If r(n) = (li, . . . , l m ), r'(n') = . . . , l' m ), and k = l[, then we say 
that r(n) and r'(n') are indistinguishable to agent i and write (r,n) ~j (r',n'). Of course, ~, 
is an equivalence relation on global states (inducing an equivalence relations on points). Kiip 
is defined to be true at (r, n) exactly if (p is true at all the points whose associated global state 

1 Note that while we are being consistent with [HV89] here, in [ FHMV9^|, tv is ta ken to be a function from 
global states (not points) to truth values. Essentially, this means that in ] [FHMV95| a more restricted class of 
structures is considered, where n is forced to be the same at any two points associated with the same global 
state. Clearly our soundness results hold in the more restricted class of structures. It is also easy to see that our 
completeness results hold in the more restricted class too. All our completeness proofs have (or can be easily 
modified to have) the property that a structure is constructed where each po int is asso ciated with a different 
global state, and thus is an instance of the more restrictive structures used in FHMV95|. 



2 



is indistinguishable to i from that of (r, re). We proceed as follows: 



• (X, r, re) \= p for a primitive proposition p iff 7r(r, n)(p) = true 

• (X, r, n) \= p A ip iff (X, r, re) \= ip and (X, r,n) \= ip 

• (X, r, n) |= ->ip iff (X, r, n) ^ p 

• (X, r, n) (= A"j</? iff (X, r',n') \= ip for all (r',n') such that (r, n) ~j (r',ra') 

• (X, r, n) |= .Ey? iff (X, r', re') ^= Aj</? for i = 1, . . . , m 

• (X,r,re) |= Cp iff (X,r',re') |= E k ip, for fc = 1, 2, . . . (where #V = ^¥> and £ fe +V = 
EE k <p) 

• (X, r, n) H O iff (X, r, n + 1) H V 

• (X, r, re) |= ip U tp iff there is some re' > n such that (X, r, n') |= ^, and for all n" with 
n < n" < n', we have (X, r, n") \= p. 

There is a graphical interpretation of the semantics of C which we shall find useful in the 
sequel. Fix an interpreted system X. A point (r',n f ) in X is reachable from a point (r, n) if 
there exist points (ro,no), . . . , (rk,rik) such that (r, n) = (ro,no), (r',n') = (rk,rik), and for all 
j = 0, . . . , k — 1 there exists z such that (rj,rij) ~j (r^ + 1, + 1). The following result is well 
known (and easy to check). 



Lemma 2.1: HHM92| (X, r, n) |= C<p iff (X, r',n') \= <p for all points (r',n') reachable from 
(r, n). 

As usual, we define a formula ip to be valid with respect to a class C of interpreted systems iff 
(X, r, re) |= <£> for all interpreted systems X € C and points (r, n) in X. A formula <p is satisfiable 
with respect to C iff for some X € C and some point (r, re) in X, we have (X, r, re) |= y>. 

We now turn our attention to formally defining the classes of interpreted systems of interest. 
For some of these definitions, it will be useful to give a number of equivalent presentations. 

Perfect recall means, intuitively, that an agent's local state encodes everything that has 
happened (for that agent's point of view) thus far in the run. To make this precise, define agent 
i 's local-state sequence at the point (r, n) to be the sequence Iq, . . . , Ik of states that agent i takes 
on in run r up to and including time re, with consecutive repetitions omitted. For example, if 
from time through 4 in run r agent i goes through the sequence /, /, /', I, I of states, its history 
at (r, 4) is just /, I. Roughly speaking, agent i has perfect recall if it "remembers" its history. 
More formally, we say that agent i has perfect recall (alternatively, agent i does not forget) 
in system 7Z if at all points (r, re) and (r', re') in 1Z, if (r, re) ~j (r',re'), then r has the same 
local-state sequence at both (r, re) and (r',n'). 

There are a number of equivalent characterizations of perfect recall. One characterization 
that will prove particularly useful in the comparison with the concept of no learning, which 
we are about to define, is the following. Let S = (so, s\, S2, ■ ■ ■) and T = (to, ti, t%, . . .) be two 
(finite or infinite) sequences and let ~ be a relation on the elements of S and T. Then we say 
that S and T are ~-concordant if there is some k (k may be oo) and nonempty consecutive 
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Figure 1: A system where agent i has perfect recall 



intervals Si, . . . , of S and T\, . . . , of T such that for all s G Sj and t €Tj, we have s ~ t, 
for j = 1, . . . , k. 



Lemma 2.2: [ HV86| , Mey94] The following are equivalent. 

(a) Agent i has perfect recall in system 1Z. 

(b) For all points (r, n) ~j (r', n') in 1Z, ((r, 0), . . . , (r, n)) is ^{-concordant with ((r', 0), . . . , (r', n')). 

(cj For points (r,n) ~j (r',n') in 1Z, if n > 0, then either (r,n — 1) ~j (r',n') or t/iere 
exists a number I < rt' stic/i i/tai (r, n — 1) ~» (r 7 , Z) anc? /or a// fc mi/i I < k < n' we have 
(r,n) ~j (r', fc). 

^ For a// points (r, n) ~j (r', rj') in 7?., if k < n, then there exists k' < n' such that (r, k) ~j 

Proof: The implications from (a) to (b), from (b) to (c) and from (c) to (d) are straightforward. 
The implication from (d) to (a) can be proved by a straightforward induction on n + re'. | 

This lemma shows that perfect recall requires an unbounded number of local states in 
general, since agent i may have an infinite number of distinct histories in a given system. A 
system where agent i has perfect recall is shown in Figure |], where the vertical lines denote 
runs (with time at the top) and all points that i cannot distinguish are enclosed in the same 
region. 

We remark that the official definition of perfect recall given here is taken from [FHMV95 |. 
In [HV8C], part (d) of Lemma was taken as the definition of perfect recall (which was called 
no forgetting in that paper). 
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Roughly speaking, no learning is the dual notion to perfect recall. Perfect recall says that 
if the agent considers run r' possible at the point (r, n), in that there is a point (r',n') that 
the agent cannot distinguish from (r, n), then the agent must have considered r' possible at all 
times in the past (i.e., at all points (r,k) with k < n); it is not possible that the agent once 
considered r' impossible and then forgot this fact. No learning says that if the agent considers 
r' possible at (r, n), then the agent will consider r' possible at all times in the future; the agent 
will not learn anything that will allow him to distinguish r from r' . More formally, we define an 
agent's future local-state sequence at (r, n) to be the sequence of local states lo, 1%, . . . that the 
agent takes on in run r, starting at (r, n), with consecutive repetitions omitted. We say agent 
i does not learn in system TZ if at all points (r,n) and (r', n') in TZ, if (r, n) ~j (r',n'), then r 
has the same future local-state sequence at both (r, n) and (r',n'). 

Just as with perfect recall, there are a number of equivalent formulations of no learning. 
Lemma 2.3: The following are equivalent. 

(a) Agent i does not learn in system TZ. 

(b) For all points (r,n) ~j (r',n') inTZ, ((r, n), (r, n+1), . . .) is ~j- concordant with ((r' ,n'), (r' ,n'+ 
I),...)- 

(c) For all points (r,n) ~j (r',n') in TZ, either [r,n + 1) ~j (r',n') or there exists a number 
I > n' such that (r, n + 1) ~j (r', /) and for all k with I > k >n' we have (r, n) ~j (r', k). 



Notice that we have no analogue to part (d) of Lemma |2.2| in Lemma |2.3| (where < is 
replaced by >). The analogue of (d) is strictly weaker than (a), (b), and (c), although they 
are equivalent in synchronous systems (which we are about to define formally). It was just 
this analogue of (d) that was used to define no learning in [HV86, |HV89| . We examine the 



differences between the notions carefully in Section |6| where we provide more motivation for 
the definition chosen here. 

In a synchronous system, we assume that every agent has access to a global clock that ticks 
at every instant of time, and the clock reading is part of its state. Thus, in a synchronous system, 
each agent always "knows" the time. More formally, we say that a system TZ is synchronous 
if for all agents i and all points (r, n) and (r',n'), if (r, n) ~j (r',n'), then n = n'.0 Observe 
that in a synchronous system where (r, n) ~j (r',n), an easy induction on n shows that if 
i has perfect recall and n > 0, then (r, n — 1) ~j (r',n — 1), while if i does not learn, then 
(r, n + 1) ~j (r',n + 1). 

Finally, we say that a system TZ has a unique initial state if for all runs r, r' € TZ, we have 
r(0) = r'(0). Thus, if TZ is a system with a unique initial state, then we have (r, 0) ~, (r',0) 
for all runs r, r 1 in TZ and all agents i. 

We say that X = (TZ,tt) is an interpreted system where agents have perfect recall (resp., 
agents do not learn, time is synchronous, there is a unique initial state) exactly if TZ is a system 
with that property. We use C m to denote the class of all interpreted systems for m agents, 



Wc remark that in |HV8€| ], a slightly weaker definition is given: There, a system is said to be synchronous if 



for all runs r, if (r, n) ~j (r, n') then n — n' . It is easy to show (by induction on n) that the two definitions are 
equivalent for systems where agents have perfe ct recall. In general, however, they are different. The definition 



given here is the one used in FHMV95, HV89 
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and add the superscripts nl, pr, sync, and uis to denote particular subclasses of C m . Thus, 
for example, we use C^ pr to denote the set of all interpreted systems with m agents that have 
perfect recall and do not learn. We omit the subscript m when it is clear from context. 

The results of [ |HV89 , HV88a| ] (some of which are based on earlier results of Ladner and Reif 
[LR86[) are summarized in Table |]. For p € KL m , we define ad(p) to be the greatest number of 
alternations of distinct K^s along any branch in <^'s parse tree. For example, ad{K\^K2K\p) = 
3; temporal operators are not considered, so that ad(K\OKip) = 1. (In Table ||, we do not 
consider the language CKL\. This is because if m = 1, then Cp> is equivalent to K\p>. Thus, 
CKL\ is equivalent to KL\.) We omit the definitions of complexity classes such as II } and 
nonelementary time (ex(ad(p)+l, c\p\) here. (Note that c is a constant in the latter expression.) 
All that matters for our purposes is that for the cases where the complexity is n} or co-r.e., 
there can be no recursive axiomatization; the validity problem is too hard. We provide complete 
axiomatizations here for the remaining cases. 





CKL m , m>2 


KL m , m > 2 


KL X 


npr npr, sync npr, ms 

npr, sync, uis 
^"m 


n{ 


nonelementary time 
ex(ad(p) + 1, c\(p\)) 


double-exponential 
time 


nnl nnl,pr nnl, pr, sync 
^-"m i i *-"m ) 
nnl, sync 


n{ 


nonelementary space 
ex(ad(tp),c\tp\)) 


EXPSPACE 


nnl,pr ,uis 


n{ 


n{ 


EXPSPACE 


nnl,uis 


co-r.e. 


co-r.e. 


EXPSPACE 


nnl, sync, uis nnl,pr, sync, uis 


EXPSPACE 


EXPSPACE 


EXPSPACE 


n nsync nsync, ms puis 


EXPTIME 


PSPACE 


PSPACE 



Table 1: The complexity of the validity problem for logics of knowledge and time 



3 Axiom Systems 

In this section, we describe the axioms and inference rules that we need for reasoning about 
knowledge and time for various classes of systems, and state the completeness results. The 
proofs of these results are deferred to Section [|. 

For reasoning about knowledge alone, the following system, with axioms K1-K5 and rules 
of inference R1-R2, is well known to be sound and complete [ FHMV95| , Hin62j: 

Kl. All tautologies of propositional logic 

K2. Knp A Ki((p =>■ tp) Kiip, i = l,...,m 

K3. Knp <p, i = 1, . . . , n 

K4. Kiip =4* KiKip, i = 1, . . . , m 

K5. ~^Kip => K^Kip, i = 1, . . . , m 
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Rl. From <p and ip =>■ ip infer ip 



R2. From <p infer ifj^, i = 1, . . . , m 

This axiom system is known as S5 m . 

For reasoning about the temporal operators individually, the following system (together 



with Kl and Rl), is well known to be sound and complete [|FHMV95| , pPSS80fl : 

Tl. Ofo) A 0((p => ip) => O^p 
T2. 0(-n<p) => -,<> 
T3. pUip 44> V V (ip A 0(ipUip)) 
RT1. From p> infer Q<p 

RT2. From y?' => -sip A CV infer <// =4> -.(</> U ip) 

The system containing the above axioms and inference rules for both knowledge and time 
is called S5^. S5^ is easily seen to be sound for C m , the class of all systems for m agents. 
Given that there is no necessary connection between knowledge and time in C m , it is perhaps 
not surprising that S5^ should be complete with respect to C m as well. Interestingly, even if we 
impose the requirements of synchrony or uis, S5^ remains complete; our language is not rich 
enough to capture these conditions. 

Theorem 3.1: S5 ? ^ is a sound and complete axiomatization for the language KL m with respect 
to C m , C% nc , CZ S , and C% nc > uis , for all m. 

We get the same lack of interaction between knowledge in the classes C m , C^ nc , C™ s , and 
gsync,ms even wrien we ac u common knowledge. It is well known that the following two axioms 
and inference rule characterize common knowledge [ [FHMV95 , |HM92 |: 



CI. Etp^A^Kip 

C2. Op => E(p A Cp) 

RC1. From p E(ip A p) infer p =>• Cip 

Let S5C^ be the result of adding CI, C2, and RC1 to S5^. We then have the following extension 



of Theorem 3.1. 



Theorem 3.2: S5C^ is a sound and complete axiomatization for the language CKL m with 
respect to C m , C% nc , C™ s , and C^ nc ' uis , for all m. 



If we restrict attention to systems with perfect recall or no learning, then knowledge and 
time do interact. We start by stating five axioms of interest, and then discuss them. 

KT1. KiUip =>- UKup, i = l,...,m 
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KT2. KiOcp => QKup, i = l,...,m. 

KT3. K m A 0{Ki<p 2 A -i^ 3 ) => U({K, L p x ) U [(K m ) U -^3]), % = 1, . . . , m 
KT4. K i <piUK i <p2=>K i (K i <p 1 UK i <p 2 ),i = l,...,m. 
KT5. Q-KifP KiQip, i = l,...,m. 



Axiom KT1 was first discussed by Ladner and Reif |LR86 ]. Informally, this axiom states 



that if a proposition is known to be always true, then it is always known to be true. It is not 



hard to show, using Lemma 2.2, that axiom KT1 holds with perfect recall, that is, KT1 is valid 
in . It was conjectured in an early draft of [|FHMV95|| that the system S5^ + KT1, would 



be complete for . However, it was shown in [Mey94] that this conjecture was false. To get 
completeness we need a stronger axiom: KT3. 

It is not hard to see that KT3 is valid in systems with perfect recall. A formal proof 
is provided in Section [|, but we can give some intuition here. Suppose (I, r, n) \= K^p\ A 
0(Kiif2 A -iKiifs). That means that (I,r,n + 1) (= ->Kiips, so there must be some point 
(r',n') ~j (r, n + 1) such that (X,r',n') (= —1^33. Because agent i has perfect recall, there must 
exist some k' < n' such that (r 1 , k') ~j (r, n). It is not hard to show, using Lemma |2.2| (c), that 
(l,r',k r ) \=Ki(piU{Ki(p2U^(p3). It follows that (2,r,n) \= L^K^U {K^U -^ 3 ))- 

In the presence of the other axioms, KT3 implies KT1. 

Lemma 3.3: KT1 is provable in S5^ + KT3. 

Proof: Note that by purely temporal reasoning, we can show h Dp -£4> □ □</?. Using R2 and 
K2, this implies that h K{D(p 4^ KiDDp. Now if ip\ = p2 = true, then KT3 simplifies to 
O^Kiipz ~^KiOip 3 . In particular, taking the contrapositive, substituting tp 3 = Dtp, and using 
T2, we obtain h KiDDip => QKiDip, which yields h K{Dip QKiDip by the equivalence noted 
above. It is also straightforward to show that Dtp p, from which it follows, using K2 and 
R2, that h K^Dcp => Knp. The axiom KT1 now follows using the rule RT2. | 

KT3 turns out to be strong enough to give us completeness, with or without the condition 

uis. 

Theorem 3.4: S5^ + KT3 is a sound and complete axiomatization for the language KL m with 
respect to C^I and C^' ms , for all m. 



Theorem 3.1 shows that requiring synchrony or uis does not have an impact when we 



consider the class of all systems — C m , C^ ync , C™ s , and C^ ync,ms are all axiomatized by S5^ — and 



Theorem 3.4 shows that adding uis does not have an impact in the presence of perfect recall. 
However, requiring synchrony does have an impact in the presence of perfect recall. It is easy 
to see that KT2 is valid in C^ ,sync , and it clearly is not valid in . Moreover, KT2 suffices 
for completeness in C^' sync ; we do not need the complications of KT3. 



Theorem 3.5: S5^ + KT2 is a sound and complete axiomatization for the language KL m with 
respect to q%' sync and C]£> sync > uis , for all m. 
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KT4 is the axiom that characterizes no learning. More precisely, we have 



5 U 

J m 

respect to C m l for all m. 



Theorem 3.6: S5^ + KT4 is a sound and complete axiomatization for the language KL m with 

->nl 



Unlike previous cases, the uis assumption is not innocuous in the presence of nl. For one 
thing, it is not hard to check that assuming uis leads to extra properties. Indeed, as Table |l] 
shows, if m > 2, then assuming a unique initial state along with no learning results in a class of 
systems that do not have a recursive axiomatic characterization, since the validity problem is 
co-r.e. On the other hand, if there is only one agent in the picture, things simplify. No learning 
together with uis implies perfect recall. Thus, we get 

Theorem 3.7: S5^ + KT3 + KT4 is a sound and complete axiomatization for the language 
KL m with respect to C m l,pr for all m. Moreover, it is a sound and complete axiomatization for 
the language KL\ with respect to Q™ l 'P r > uis _ 

In synchronous systems with no learning, things again become simpler. KT5, the converse 
of KT2, suffices to characterize such systems. 

Theorem 3.8: S5^ + KT5 is a sound and complete axiomatization for the language KL m with 
respect to C m l,sync . 



Of course, it follows from Theorem 3^8 that KT4 can be derived in the system S5^ + KT5 
(although this result takes some work to prove directly). 

Not surprisingly, if we combine perfect recall, no learning, and synchrony, then KT2 and 
KT5 give us a complete axiomatization. 

Theorem 3.9: S5 ? ^ + KT2 + KT5 is a sound and complete axiomatization for the language 
KL m with respect to C™l> pr > sync for all m. 

Finally, it can be shown that when we combine no learning, synchrony, and uis, then not 
only do all agents consider the same worlds possible initially, but they consider the same worlds 
possible at all times. As a result, the axiom Knp <^ Kjip is valid in this case. This allows us to 
reduce to the single-agent case. Moreover, as we observed above, in the single-agent case, no 
learning and uis imply perfect recall. Thus, we get the following result. 

Theorem 3.10: S5^ + KT2 + KT5 + {Kif 44> K\ip] is a sound and complete axiomatization 
for the language KL m with respect to C%' sync ' uis and C m l > pr > sync > ms for all m. 

A glance at Table [l] shows that we have now provided axiomatizations for all the cases where 
complete axiomatizations exist. (Notice that for the language CKL m , if m = 1, then common 
knowledge reduces to knowledge, while if m > 1, then complete axiomatizations can exist only 
for C m , C% nc , C^ s , C^ nc - Uis , C^' sync ' uis , and C^P r ' sync ' uis . The first four cases were dealt with 



in Theorem 3.2, while in the last two, as we have observed, common knowledge reduces to the 



knowledge of agent 1. 
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4 A Framework for Completeness Proofs 



In this section we develop a general framework for completeness proofs that reduces the work 
required in each of the different completeness results to a single lemma. 

A formula tp is said to be consistent in a logic L if it is not the case that \~l -itp. For 
each of the pairs of logic L and class of systems C we consider, the proof that L is complete 
with respect to C proceeds by constructing for every formula tp consistent with respect to L, a 
system in C containing a point at which tp is true. All the results in this section hold for every 
logic containing S5^, except for Lemma 4.5, which mentions common knowledge. This lemma 
holds for every logic containing S5C^. Rather than mentioning the logic L explicitly in each 
case, we just write h rather than the intended logic(s) will be clear from context. We also 
fix the formula tp, which is assumed to be consistent with respect to L. 

A finite sequence a = i\i 2 ■ ■ ■ ik of agents, possibly equal to the null sequence e, is called 
an index if ii ^ ij+i for all I < k. We write \o~\ for the length k of such a sequence; the null 
sequence has length equal to 0. 

If S is a set, and S* is the set of all finite sequences over S, we define the absorptive 
concatenation function # from S* x S to S* as follows. Given a sequence a in S* and an 
element x of 5, we take ojpx = a if the final element of a is x. If the final element of a is not 
equal to x then we take ojpx to be ax, i.e. the result of concatenating x to a. We shall have two 
distinct uses for this function, applying it to primarily to sequences of agents, and sometimes 
to sequences of "instantaneous states" of agents in the context of asynchronous systems. 

If tp G CKL m , for each k > 0, we define the ^-closure clk(tp), and for each agent i, we define 
the i-closure clkiitp). The definition of these sets proceeds by mutual recursion: First, we 
let the basic closure clo(tp) be the smallest set containing tp that is closed under subformulas, 
contains —up if it contains (p and (p is not of the form —>tp', contains ECtp if it contains C<p, and 
contains K%tp, . . . , K n tp if it contains Etp. (Of course, the last two clauses do not apply if tp is 
in KL m , and thus does not mention common knowledge.) If i is a agent, we take clk,i(tp) to be 
the union of cl}.{tp) with the set of formulas of the form Ki(tp\ V ... V tp n ) or -^Ki(tp\ V ... V (p n ), 
where the <pi are distinct formulas in clk(ip)- Finally, clk+i(tp) is defined to be U^dfc^VO- 

If A is a finite set of formulas we write (fx for the conjunction of the formulas in A. A finite 
set A of formulas is said to be consistent if <px is consistent. If A is a finite set of formulas and 
cp is a formula we write X \\— (p when h <px =>- <p>- Clearly if A ||— p\ and h tp\ => <p% then 
A ||- ip 2 . 

Suppose CI is a finite set of formulas with the property that for all (p £ CI, either —up G CI 
or cp is of the form -up' and <p' E CI. (Note that the sets clk(ip) and clk i(ip) have this property.) 
We define an atom of CI to be a maximal consistent subset of CI. Evidently, if A is an atom 
of CI and tp £ CI, then either A ||— tp or A ||— —up. Thus, we have that 

Lemma 4.1: h Vx an atom of ci Vx- 

We begin the construction of the model of tp by first constructing a pre-model, which is a 
structure {S, — ~i, . . . , ~„) consisting of a set S of states, a binary relation — > on S, and for 
each agent i an equivalence relation ~j on S. Recall from Section [2] that for a formula tp e KL m , 
the alternation depth ad(tp) is the number of alternations of distinct operators Aj in tp. Let 
d = ad(tp) if tp G AL m ; otherwise (that is, if ^> mentions the modal operator C), let d = 0. 
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The set S consists of all the pairs (o~,X) such that a is an index, \a\ < d, and 

1. if cr = e then X is an atom of cld(ip), and 

2. if <7 = ri then X is an atom of clk,i{ip), where k = d — \o~\. 

The relation — > is defined so that (cr, X) — ► (r, Y) iff r = cr and the formula 99 x A Ov^y is 
consistent. If X is an atom we write X/Ki for the set of formulas <p such that Knp E X. We 
say that states (cr,X) and (r, Y) are i-adjacent if cr^i = r#i. The relation ~, is defined so 
that (cr, X) ~j (r, y) iff a and r are i-adjacent and X/Ki = Y/K{. Clearly, i-adjacency is an 
equivalence relation, as is the relation ~j. 

A a -state (for ij)) is a pair (cr, X) as above. Thus (cr, X) is the unique cr-state with atom X. 
If s = ((J,X) is a state, we define (p s to be the formula ipx, and write s ||— <p for h =4> 99. 
We say that the state s directly decides a formula 99 if either (a) 99 £ X or (b) -192 £ I or 
(c) 99 = -199' and 99' E X. Note that this implies that either s \\— ip or s || — -199. In case this 
latter condition holds we say simply that s decides ip. Note that if a = ri then each cr-state 
directly decides every formula in dd-uuC^)- Also, every e-state directly decides every formula 
in cl d (a). 

Lemma 4.2: If s and t are i-adjacent states, then the same formulas of the form Knp are 
directly decided by s and t. 

Proof: Suppose that s and t are i-adjacent, s is a cr-state, t is a r-state. Clearly if a = r, then 
s and t directly decide the same formulas (and, a fortiori, the same formulas of the form K^(p) 
since they are both maximal consistent subsets of the same set of formulas. If cr 7^ r, then 
either a = ri or r = cri. By symmetry, it suffices to deal with the case a = ri. By definition, 
s directly decides the .fQ-formulas in dg-ui i(ip), while t directly decides the ifj-formulas in 
cl d _\ T \j(ijj) if r = r'j or cld(ifi) if r = e. We leave it to the reader to check that it follows that 
the i^-formulas directly decided by both s and t are precisely those in c^i^u^). I 

If s is a cr-state, we take to be the disjunction of the formulas <pt, where t ranges over 
the cr-states satisfying s ~j t, and we take to be the disjunction of the formulas tpt, where 
t ranges over the (cr#i)-states satisfying s «j i.0 Observe that because R3j is an equivalence 
relation we have that if s ~j t then <E> Sj j = &t,i and = <3?^. The following result lists a 
number of knowledge formulas decided by states. 

Lemma 4.3: 

(a) If s is a a -state and t is a a -state or {a #1)- state such that s rfci t, then s \\— Ki^ipt. 

(b) For all a-states s, we have s \\— Ki<& s i; in addition, if \o~#i\ < d, then s \\— K^^. 

(c) For all a-states s and (a^i) -states t with s ~j t, we have s \\— Li<pt. 

(d) If s is a a-state and t is a (a^i) -state such that s 96$ t, then t || — 

3 It can be shown that if \cr#i\ < d, then 3> s ,; is logically equivalent to but we do not need this fact here. 
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Proof: For (a), suppose that s rfci t, where s = (a, A) and t = (r, Y), where r is either a or cr#i. 
Then X/Ki ^ Y/Ki so either there exists a formula Kip £ X such that K^p £" Y or there exists 



a formula K^tp £ 1" such that iTj^ X. As the states s and t are i-adjacent, by Lemma 4.2, 
in either case the formula Kip is directly decided by both the states s and t. In the first case, 
we have that h ~>Knp and hence, using R2, that h Ki(Knp -■934). By K4 we obtain 

from the fact that Knp £ X that s \\— KiKiip. It now follows using K2 that s |[— K^pt- In 
the second case, we have that h ^ Kiip, hence, using R2, that h K^Kip =4> -upt). By 
K4 we obtain from the fact that ~^Kip £ X that s ||— K^Kip. It now follows using K2 that 
s ||- Ki^p t . 



For (b), by Lemma LI, we have that h Vx an atom of d ki {i>) fx- Hence, by R2 we obtain 
that h Ki Vo— states t Vt- ^ follows from this using (a) and K2 that s \\— Ki& s ^. If \o~#i\ < d, 
then a similar argument shows that s \\— Aj^^. 

For (c), suppose that s = (cr,X) (cr#i,y) = t and k = d — \ajfi\. We claim first that 
if W = Y fl c/fc(V'), then s ||— K^p t ^ K^pw- This is because the fact that V is a subset 
of clk t i{il>) implies that all formulas p in Y \ W are of the form K^p' or -iKip', hence p £ X 
if and only if p £ Also, by K4 and K5 we have that s ||— KiKip' when Aj(// £ AT and 
s ||— K^Kip 1 when i^y/ £" A. It follows using K2 that s ||— Kipy\w Since pt is equivalent 
to pw A ^y\VK) we obtain using K2 that s ||— K^p t ^ K^pw- 

Now by K3 we have h pt => LiPt- Further, the argument of the previous paragraph also 
shows t \\— K^pt 44> Ki^pw-, so we obtain that t \\— Lipy/- But ->pw 1S equivalent to the 
disjunction of a subset {pi, . . . , p n } of cZfc(V')- Let a be the formula Ki{p\ V ... V p n ), which is 
equivalent to K^pw ■ It follows from the definition of clk^{ip) that a is in clk ; i(ip), hence directly 
decided by both t and s. Consequently, a is not in Y, since t \\— ->a. Because X/Ki = Y/Ki, 
the formula a is not in A either, so s \\— —>a. Applying the fact that a is equivalent to K^pw, 
we see that s \\— Lipy/. The equivalence of the previous paragraph now yields that s \\— LiPt- 

For (d), note that if t and v are distinct (cr#i)-states then t \\— ->p v . Thus, if s is a cr-state 
such that s tfeit then t ||— _,< I ) j"j, which implies, using K3, that t ||— -lAj^j^. | 

If T is a set of states, then we write pt for the disjunction of the formulas pt for t in T. 
Using RT1, Tl, and T2, the following result is immediate from the fact that s -/+ t implies 



h p s =^ ->Opt, together with the fact that h V s ao --state <Ps, which follows from Lemma 4.1 . 

Lemma 4.4: Let s be a state and let T be the set of states t such that s — > t. Then s \\— Opt 

The next result provides a useful way to derive formulas containing the until operator. 

Lemma 4.5: For all formulas a,f3 and 7, if ' h a =4* -17 and h a 0(a V (—>/3 A _| 7)) then 
ha4 -iffiU'y). 

Proof: Suppose that h a =^ -17 A 0(" V A -17)). By T3, we obtain that \- a A (/3U 7) 
^7 A 0{/3Uj) A O(o V {^13 A -17)). Since, by T3 again, \- fiU-y ^ — 1/3 A -.7), it follows 
using Tl and RT1 that h a A ((3U 7) -.7 A 0(« A {/3Uy)). Now using RT2 we obtain 
^> -■(/3L r 7), which implies that ha=> — ■(/? ?7 7). I 
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The following shows that the pre-model almost satisfies the truth definitions for formulas in 
the basic closure. Note that every state directly decides all formulas in the basic closure. Define 
a -^-sequence of states to be a (finite or infinite) sequence si, S2, . . . such that s\ — > S2 — > • • •• 

Lemma 4.6: For all a-states s, we have 

( a ) if Of € clo(tp), then for all states t such that s — > t, we have s \\— Of iff t \\— ip, 

(b) If 'Ki<p G clo(ip), then s \\— ^Kiip iff there is some a-state t such that s ~j t and t \\— —up. 
Moreover, if < d, then s \\— ~^Kip iff there is some (a#i) -state t such that s «j t 
and t \\— —><p. 

(c) if f\ U <f2 £ clo(tp) then s \\— <p\ U p2 iff there exists a -^-sequence s = so — ► s% — ► . . . — > 
s n , where n > 0, such that s n \\— ip%, and Sk \\— fx for all k < n. 



Proof: For part (a), suppose first that s \\— Q(p and s — > t. Since <p G clo(tp), it follows 
that t \\— ip or t \\— —xp. But, by Tl and T2, the latter would contradict the assumption that 
tp s A Oft is consistent. Hence we have t ||— (p. Conversely, suppose that s — > t and t ||— ip. 
Using Tl, we have h Oft Of- Since Op G clo(tp) we have either s \\— Of or s \\~ ~^Of- 
But the latter would contradict s — ► t, so we obtain s \\— Of- 

For the "if" direction of part (b), note that the fact that Ki<p is in clo(ip) implies that if 
s ~j t and s \\— Knp, then t \\— Knp, hence t \\— <p by K3. For the converse, suppose that 
t \\— p> for all a-states t with s ~j t. Then h $ s j </?, hence h Ki$ Ss i =4> iiQy, using K2 
and R2. By Lemma 4.2(b), we have s ||— Kj$ S) j. It follows immediately that s ||— If 
|<r#i| < d, a similar argument shows that if i ||— <p for all (o~#i) -states t such that s ~j t, then 

S ||- 

For part (c), note that if f%U ipi is in clo(ip), then every state directly decides each of 
the formulas pi, p2, and f\U f2- We first show that if there exists a sequence of states 
s = so — > si — > . . . — > s ra such that s n ||— 922 and s^ ||— for all < n then s ||— (p% U (p%. 
We proceed by induction on n. The case n = is immediate from T3. For the general case, 
notice that it follows from the induction hypothesis that s\ \\— (pi U ipz)- Since so — > s\, it 
follows that (p SQ A Oifi U f2) is consistent. By assumption, we also have so ||— fi- Using T3, 
we see that so |j— ~^{fi U f2) would be a contradiction. Hence so ||— f\ ~U f2- 

The converse follows immediately from Lemma 4.7 below. | 



Lemma 4.7: If p s /\(p\U<p2 is consistent, then there exists a ^-sequence s = sq — > s\ — > 
. . . —>■ s n , such that (p Sn A p>2 is consistent, and p Sk A pi is consistent for all k < n. 

Proof: Suppose by way of contradiction that ip s A <p\ U p>2 is consistent and no appropriate 
—►-sequence exists. Let T be the smallest set S of states such that (i) s G S, and (ii) if t G S, 
t — > u, and s u A p\ is consistent, then u G S. Then we have that t \\— —xp2 for all t G T, so 
h pt ~^P2- In addition, for each t G T and state u such that t — > -u, we have either u G T 
or u ||— -1^1 A -i</?2- Thus, using Lemma [4.4|, we obtain h ^ ^ OifT V (-></?i A _, (/ J 2))- It 



now follows using Lemma L5 that h <px U p>2)- In particular, since s G T, we have 



s ||— U (P2), which contradicts the assumption that <p B A f\ U P2 is consistent. | 
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For the next result, recall that when the formula ip contains the common knowledge operator 
we take d = 0, so that all states are e-states. 

Lemma 4.8: // dp S clo(ip), then s \\— -iCtp iff there is a state t reachable from s through 
the relations ~j such that t \\— —up. 

Proof: The implication from right to left is a straightforward consequence of the fact that 
if t \\— —up then t \\— ~>C(p, by CI, C2 and K3, together with the fact that if t ~, t', then 
t \\— C(p if and only if t' \\— C<p. (Proof of the latter fact: If t \\— Cip then t \\— Kidp by 
CI and C2. Hence, since t ~j t' and KiCp £ clo(ip), we must have t' ||— dp. The opposite 
direction follows symmetrically.) This leaves only the implication from left to right, for which 
we prove the contrapositive. Suppose that no state containing -^p is reachable from s by means 
of a sequence of steps through the relations ~j. Let T be the set of states reachable from 
s. By Lemma |4.3| (a), if t and t' are states with t 964 t' then t \\— Ki—xpf. It follows from 
this that t \\— Knpx for every state t G T and agent i. Thus, because h <pt we have 

h <pt E{ipx A <£>). By RC1 it follows that h dp. Since s £ T, it is immediate that 

s ||- Cyj. I 

We say that an infinite — ^-sequence of states (sq,si, . . •), where s n = (a,X n ) for all n, is 
acceptable if for all re > 0, if <pi U ipi € X n then there exists an m > n such that s m \\— <pi and 
s k \\~ fx f° r ah k with n < k < m. 

Definition 4.9: An enriched system for ^ is a pair (7^, S), where 7Z is a set of runs and S is 
a partial function mapping points in 1Z x N to states for tp such that the following hold, for all 
runs r £ 1Z: 

1. If S(r, n) is defined then S(r, n') is defined for all n' > n, and S(r, n), S(r, n + 1), . . . is 
an acceptable — ^-sequence. 

2. For all points (r, n) ~i (r',n'), if S(r, n) is defined then E(r',n') is defined and E(r, n) ~j 
S(r',n'). 

3. If S(r, n) and s are cr-states such that S(r, n) ~j s, then there exists a point (r',n') such 
that (r, n) ~j (r',n') and S(r',n') = s. 

4. if dp € clo>{ip) and S(r, n) ||— ^Cip, then there exists a point (r', n') reachable from (r, n) 
such that S(r', n') ||— ^v?. 

An enriched^ system for ^ is a pair (1Z, S) satisfying conditions 1, 2, and the following 
modification of 3: 

3'. If S(r, n) is a cr-state and s is a (<r#i)-state such that E(r, n) Wj s, then there exists a 
point (r',n') such that (r, n) ~j (r',n') and E(r',n') = s. 
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Given an enriched (resp., enriched + ) system (TZ, E), we obtain an interpreted system X = 
(1Z, 7r) by denning the valuation ir on basic propositions p by ir(r, n)(p) = true just when S(r, n) 
is defined and £(r, n) |[— p. The following theorem gives a sufficient condition for a formula in 
the basic closure to hold at a point in this standard system. If a is the index . . . #ik, let 
K a p be an abbreviation for Ki x . . . Ki k ip. (If a = e, then we take K a p to be (p.) 



Theorem 4.10: 



(a) If (1Z,Y,) is an enriched system for ip, X is the associated interpreted system, p is in the 
basic closure clo(ip), and £(r, n) is defined, then (X, r,n) \= p if and only ifT,(r,n) \\— p. 

(b) If (7Z, S) is an enriched^ system for ip £ KL m , X is the associated standard system, p is 
in the basic closure clo(ip), S(r, n) is a a-state, and ad{K a p) < d, then (l,r,n) \= p if 
and only if £(r, n) |[— p. 

Proof: We first prove part (a). We proceed by induction on the complexity of p. If p is a 
propositional constant then the result is immediate from the definition of X. The cases where 
p is of the form —«pi or <p% A (p2 are similarly trivial. This leaves five cases: 

Case 1: Suppose that p is of the form O^i- Then (X, r,n) \= <p if and only if (X, r, n + 1) |= 
p>\. Note that S(r, n + 1) must be defined by Condition 1 of Definition ^J^. Since p>\ is a 
subformula of <p it is in clo(ip), so it follows by the induction hypothesis that (X, r, n + 1) \= p>\ 
holds precisely when S(r, n + 1) ||— p\. By Condition 1, S(r, n) — > S(r, n + 1), so we obtain 
from Lemma f4,6| (a) that E(r, n + 1) ||— p\ if and only if S(r, n) \\— OVi- Putting the pieces 
together, we get (I,r,n) \= p if and only if S(r, n) ||— p>. 

Case 2: Suppose that p is of the form p\ U p2- Then the subformulas p)\ and <p2 are also 



in cIq{iP). Note also that by Condition 1 of Definition O, S(r, n') is defined for all n' > n, 
and E(r, re),S(r, n + 1),... is an admissible — ^-sequence. Thus, if S(r, n) ||— p^\ U p2, then 
by Lemma fO](c) there exists some n' > n such that S(r, n 1 ) ||— p2 and S(r, k) |[— for 
n < k < n' . By the induction hypothesis, this implies that (I,r,n') \= p2 and (2,r,k) \= p\ 
for n < k < n'. In other words, we have (I,r,n) \= p\ U <p>%. Conversely, if (I,r,n) \= p\ U p>2, 
then by the induction hypothesis and the semantics of U we have that there exists some n' > n 
such that S(r, n') \\— p2 and T,(r,k) \\— p\ for n < k < n'. Since S(r, n) — > S(r, n + 1) — > 
. . . — > E(r, n'), it follows using Lemma |4.6| (c) that S(r, n) ||— y?i C/(^2. 

Case 5/ Suppose that p is of the form Kip>\. We first show that S(r, n) ||— -ftTj^i implies 
(X, r, n) ^ Ki<p\. Assume S(r, n) ||— i^iyi and suppose that (r, n) ~j (r',n'). Then by Con- 
dition 2 of Definition [O^, we have that that E(r',n') is defined and S(r, n) ~j S(r',n'). Since 
i^i</3 € do (VO we obtain S(r, n') ||— Kip\. By K3 this implies S(r, n') ||— p\. Since (/? G clo(ip), 
by the induction hypothesis, we obtain that (T,r',n') \= p\. This shows that (X, r',n') \= pi 
for all points (r',n') ~« (r,n). That is, we have (X, r, n) \= Kip\. 

For the converse, suppose that S(r, n) ||— ^K; L p\ and that S(r, n) is a u-state. By Lemm a [L6| (b) , 
there exists a a-state t such that S(r, n) ~j t and t ||— -npi. By Condition 3 of Definition [4.9| , 
there exists a point (r',n') such that (r, n) ~j (r',n') and E(r',n') = t. Using the induction 
hypothesis we obtain that (X, r',n') \= ~^p\. It follows that (X, r, n) ^ ~^Kip>\. 

Case 4 : If V 5 is of the form Eipi, the result follows easily from the induction hypothesis, 
using axiom CI. 
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Case 5: Suppose ip is of the form Cip\. By Condition 2 of Definition ^1] we have that 
£(r',ra') is defined for all (r',n') reachable from (r, n). An easy induction on the length of the 
path from (r, n) to (r', n'), using the fact that K{Ctp\ is in the basic closure and axioms CI, C2, 
and K3, can be used to show that £(r', n') \\— Cipi for each point (r', n') reachable from (r', n). 
Using CI, C2, and K3, it is easy to see that E(r',n') ||— ip\. By the induction hypothesis, this 
implies that (l,r',n') \= ip\. Thus, (X, r, n) \= Cip\. 

For the converse, suppose that S(r, n) \\— ->C(pi. Then by Condition 4 of Definition |4.9| , we 
have S(r', n') \\— ~^(p\ for some point (r' , n') reachable from (r, n). By the induction hypothesis, 
we have that (X, r',n') \= —><pi, and hence (X, r, n) \= —>&pi. 

For part (b), since ip E KL m , we only need to check the analogues of cases 1, 2, and 3 
above. The proofs in cases 1 and 2 are identical to those above. The proof of case 3 is also 
quite similar, but we must be a little careful in applying the inductive hypothesis. So suppose 
that ip is of the form Knpi, S(r, n) is a a-state, and ad{K a <p) < d. The implication from left 
to right, showing that if E(r, n) \\— Ki<p then (X, r, n) \= Kitp is identical to that above. We 
just need the observation that if (r, n) ~j (r',n'), then S(r', n') is a r-state, where r^i = a#i. 
It follows that ad(K T Lp) < ad(K a #itp) < ad(K a Ki(p) < d, so we can apply the inductive 
hypothesis to conclude that (X, r',n') \= <p\. For the converse, the proof is again similar. Note 
that if ad(KfjKi(p) < d, then |cr#z| < d, so by Lemma fl.6| (b), there exists a (<r#z)-state t such 
that S(r, n) ~j t and t ||— —*<p\. By Condition 3' of Definition |4.9| , there exists a point (r',n r ) 
such that (r,n) ~« (r',n') and S(r',n') = t. Since ad{K a ^^) = ad(K a Ki(p) < d, using the 
induction hypothesis we obtain that (I,r',n') \= -"pi- It follows that (X, r, n) \= ->Kiipi. I 



Corollary 4.11: If (JZ, S) is an enriched (resp., enriched^) system for if) , X is i/ie associated 
interpreted system, and (r,n) is a point of I such that E(r, n) is an estate and T,(r,n) \\— ip, 
then (X, r,n) \= ijj. 

We apply this corollary in all our completeness proofs, constructing an appropriate enriched 
or enriched + system in all cases. 



5 Proofs of Soundness and Completeness 

We are now in a position to prove the completeness results claimed in Section [| Sections |5.1| - [5.3| 
will deal with the cases involving only perfect recall, synchrony and unique initial states. The 
cases involving no learning are a little more complex, and are dealt with in Sections |5.4| - [5.7| . 



ms 
m ' 



and C% nc > ms (Theorems and |0|) 



5.1 Dealing with C m , C^ nc , C 

The fact that S5C^ is sound for C m , the class of all systems, is straightforward and left to 
the reader (see also [|FHMV95|] ). To prove completeness of S5^ for the language KL m and of 
S5C^ for the language CKL m with respect to C m , C^ nc , C™ s , and C^ nc ' ms , we construct an 
enriched system, and use Corollary 4.11 . The proof proceeds in the same way whether or not 
common knowledge is in the language. We assume here that the language includes common 
knowledge and that we are dealing with the axiom system S5C^ when constructing the states 
in the enriched structure. Recall that in this case we work with e-states only. 
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The following result suffices for the generation of the acceptable sequences required for the 
construction of an enriched system in the cases not involving no learning; a more complex 
construction will be required in the presence of no learning. 



Lemma 5.1: Every finite -^-sequence of states can be extended to an infinite acceptable se- 
quence. 

Proof: To see this, first note that for every cr-state s there exists a state t with s — > t. For 
otherwise, s \\— — OVt f° r ^11, u-states t, which contradicts h OVt a o-— state 

tpt- (Note that 



^ O Vt a a- state ft follows from Lemma [4J] and RT1.) Thus every finite sequence of states can 
be extended to an infinite sequence, and it remains to show that the obligations arising from 
the until formulas can be satisfied. 

Suppose the finite — ^-sequence is so s n , where Sk = (cr, X&) for k = 1 . . . n. Now, 

for any formula tpi U ipi G Xq, it follows using T3 and the fact that the Sj directly decide each of 
the formulas ipi, if2, and ipi U cp2 that either the obligation imposed by p\ U p2 at sq is already 
satisfied in the sequence (so, • • • , s n ), or else s n \\— (p% U tp2 and s^ \\— <p% for < k < n. In 
the latter case, by Lemma |4.6| (c), there exists a sequence s n — > s n+ \ s n / such that 

s n i \\— if2 and 5^ ||— pi for n < k < n'. This gives a finite extension of the original sequence 
that satisfies the obligation imposed by pi U (f2 at sq. Applying this argument to the remaining 
obligations at so, we eventually obtain a finite sequence that satisfies all the obligations at so- 
We may then move on to si and apply the same procedure. It is clear that in the limit we 
obtain an acceptable sequence extending the original sequence. I 

For each agent i, define the function Oi to map the state (cr,U) to the pair (<j#i,U/Ki). 
Oi is also used later in our other constructions. Given a state s, we call Oi(s) agent i's current 
information at s. Let i be a new object not equal to any state. We say that a sequence 
S = (x, x, . . . , x, sn, sjv+1) • • •) is an acceptable sequence from N if it starts with ./V copies of x 
and the suffix (sat, Sjv+i, . . .) is an acceptable — ^-sequence of states for ip. Given a sequence S 
acceptable from N, we define a run r as follows. For each agent i, take rj(n) = (n,S) when 
n < N and rj(n) = (n, Oj(s n )) otherwise. For the environment component e, take r e (n) = S n . 

Let 1Z sync be the set of all runs so obtained, and define the partial function S on points in 
fcsync x ~N so that S(r, n) = s n when r is derived from a sequence (x, x, . . . , x, sn, s/v+ij • • •) 
acceptable from iV and n> N, and S(r, n) is undefined otherwise. 

Lemma 5.2: The pair (7Z sync ,Y,) is an enriched system. 

Proof: It is immediate from the construction that (lZ sync , S) satisfies conditions 1 and 2 of 



Definition L9. To see that it satisfies Condition 3, suppose that (r, n) is a point such that £(r, n) 
is defined and E(r, n) s. By Lemma [O] there exists an acceptable sequence (s n ,s n+ i, . . .) 
with s = s n . Let r' be the run obtained from the sequence (x, . . . ,x, s n , s n +i, . . .). Then it is 
immediate that (r, n) ~, (r',n') and S(r',n') = s. Finally, to see that it satisfies Condition 4, 
suppose that Ccp € clo(tp) and S(r, n) ||— —>C<p. By Lemma |4~1| , there is a state i reachable from 
E(r, n) through the relations ~« such that f ||— -up. An easy inductive argument on the length 
of the path from S(r, n) to t, using Condition 3, shows that there is a point (r',n') reachable 



17 



from (r, n) through the relations ~j such that E(r',n') = t. Thus, the enriched system satisfies 
condition 4. | 



Clearly the system TZ sync is synchronous, so the interpreted system X derived from (TZ sync , S) 
is also synchronous. Let s be an e-state such that s \\— ip. Such a state must exist because i/j 
was assumed consistent. By Lemma 5A there exists an acceptable sequence (so,si, • • •) with 
s = so- Let r be the corresponding run in TZ sync . Corollary 4.11 implies that (X, r, 0) \= ip. 
This establishes the completeness of the axiomatization S5C^ for the language CKL m (resp., 
of S5^ for the language KL m ) with respect to the classes of systems C m and C^ nc . To establish 
completeness of these axiomatizations for the corresponding languages with respect to the 
classes of systems C™ s and C^ nc,ms , we make use of the following result, which shows that 
sound and complete axiomatizations for the class of systems satisfying some subset of the 
properties of perfect recall and synchrony are also sound and complete axiomatizations for the 
class of systems with the same subset of these properties, but with unique initial states in 



addition. This completes the proofs of Theorem 3.1 and p. 



Lemma 5.3: Suppose x is a subset of {pr, sync}. If ip € CKL m is satisfiable with respect to 
C^, then it is also satisfiable with respect to C^ ms . 

Proof: Suppose X = (1Z, ir) G C^. We define a system X' by adding a new initial state to each 
run in TZ. Formally, we define the system I' = (TZ', ir') as follows. Let Z be some local state that 
does not occur in X and let s e be any state of the environment. For each run r £ TZ, let r + be the 
run such that r + (0) = (s e , I, . . . ,1) and r + (n+ 1) = r(n). Let TZ' = {r + : r E TZ}. The valuation 
7r' is given by vr'(r, 0)(p) = false and 7r'(r, n + l)(p) = ir(r,n)(p), for n > and propositions p. 
It is clear that X' is a system with unique initial states. Moreover, if X is synchronous, then 
so is X', and if X is a system with perfect recall then so is X'. A straightforward induction on 
the construction of the formula if G CKL m now shows that, for all points (r, n) in X, we have 
(X, r,n)^(p iff (X', r+ n + 1) [= (p. I 



5.2 Dealing with C% and C%' ms (Theorem gg ) 

We want to show that S5^ + KT3 is sound and complete with respect to C^. We first consider 
soundness. As we observed above, all axioms and rules of inference other than KT3 are known 
to be sound in all systems, so their soundness in systems is immediate. The next result 
establishes soundness of KT3. 



Lemma 5.4: All instances of KT3 are valid in 



Proof: To show that KT3 is sound, we assume that (X, r, n) \= Knp\ A 0(Knp2 A -^Ki<pz). 
We show that (X, r, n) \= Li((Ki(pi)U \{Knp2)U _i 9?3]). Now it follows from the assumption 
that (X, r, n + 1) |= -^Knp^, so there exists a point (r',n') such that (r, n + 1) ~j (r',n') and 
(X, r',n') \= ->if3- Since X G C^, by condition (d) of Lemma [2^ either (i) (r,n) ~j (r',n') or 
(ii) there exists a number Z < n' such that (r, n) ~j (r', Z) and (r, n + 1) ~j (r', fc) for all with 
I < k < n'. We claim that in either case (X, r, n) |= Li{{Knp\) U [{Knp-ij U ^3])- In case (i), 
since (X, r',n') \= we have (X, r',n') \= (Kicpi) U [(Ki<p2) U ->¥>3]. The desired conclusion 
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is then immediate from the fact that (r,n) ~j (r',n'). In case (ii), since (I, r, n) \= K^pi, and 
(r, n) ~j (r',l), we have that (X,r',l) \= Knp\. Similarly, because (X, r, n + 1) (= Knp2, we 
obtain that (I,r',k) \= Ki<p% for all with I < k < n' . Together with (X,r',n') \= -1 </ J 3> this 
implies that (X,r',l) \= (Knp{) U [(Knp-i) U -ups]. Again, since (r, n) ~j ( r 'J)i we obtain that 
(X, r, n) |= Li{{K m ) U \{K^ 2 ) U ^ 3 ])- I 

We now establish a lemma characterizing the interaction of knowledge and time in the pre- 
model. This result will enable us to satisfy the perfect recall requirement in using the pre-model 
to construct an interpreted system. It is convenient to introduce the notation [s]j, where s is a 
state, for the set of (<r#i)-states t such that s ~« t. The reader is encouraged to compare the 
following result with condition (d) of Lemma |2.2| . 



Lemma 5.5: Suppose that the axiomatization includes KT3. Then for all a -states s,t and for 
all {o~^i)-states t' , if s — > t and t ~j t' , then either (a) s ~j t' or (b) there exists a (a^i) -state 
s' such that s ~j s' and there exists a sequence of (cr#i)-states uq — > u\ — ► . . . — > u n = t' , where 
n > 0, such that s' — » u$ and ui ~j u/ + i /or all I = . . . n — 1. 

Proof: We derive a contradiction from the assumption that s — > t and i ~j i', but s 96^ t' and 
for all (<r#i)-states s' such that s s' and all sequences of (<7#i)-states uq — > Ui u n 
such that s' — > no and itj ~j Uj+i for i = . . . n — 1, we have u n ^ t' . Let T be the smallest set 
of (<7#i)-states such that 

1. if v G [s]j, v — > u', and t>' G then ?/ € T, and 

2. if u G T, i> — > ?/, and v' G then v' G T. 

Because s 9^ t', it follows from the fact that ~j is an equivalence relation that the intersection 
[s]i n is empty. Additionally, tf is not in T, for otherwise we could find a sequence of the 
sort presumed not to exist. Thus, for all v G T, we have h ip v => --></>*'• This implies that 
h </?t """ft' • Let T' be the set of (a#i)-states u ; such that v ^ v' for some t> G T. We want 
to show that 

||_ v A -.ptf) (1) 

for all G T'. If t/ G T, then clearly we have v' \\— ipx, so (|l]) holds. If ?/ ^ T, then the second 
condition in the definition of T implies that v' is not in It follows using Lemma |4.3| (d) that 
v' \\— -iKi^^. Further, t 964 v' implies that v' ^ t', so v' \\— ~«pt'- Thus, again we have (0). 
Since (|) holds for all v' G T, it follows that h ipT> (<fT V (- [ Ki®ti A ~' ( Pt>)) ■ Now by Lemma |P], 
we have \- ipx O^t', so using Tl and RT1 we obtain that h c/?t =4> Q(ifT V ("'■^z^ti ^ "'ft'))' 



Combining this with h </>y =4> -i</? t / and using Lemma |J, we get that h </9^ => ?7 t/; t /). 

In particular, we obtain u ||— ^(K^f i U iff) for all states v in T. 

We now repeat this argument to obtain a similar conclusion for the elements of [s]j. Since 
t' is not in [s]i we have that v G [s]i implies v \\— -xpf. Further, since [s]j n is empty 
we also have by Lemma [1.3|(d) that v G [s]i implies v \\— ^K^f i . Using T3 this yields that 

Let P be the set of (<r#i)-states v' such that v —* v' for some v G [s]j. Let v' G P. We want 
to show that 

v' ||- $+V^Ki$+A^Ki*+Uw))- (2) 
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If v' G [s]i then clearly v' ||— <3?j~j, so @ holds. If v' ^ [s]i, then, by Lemma |Q| (d), we have that 
v' \\— -iKi^^. We now consider two subcases: (a) v' € T and (b) v' T. If u' G T then, as we 
showed earlier, we have v' ||— £/ </?f). If v ' & T, then by the definition of T it follows 

that t tfci v' . By Lemma ^^(d), this implies that v' \\— —iK^^. Further, since t ~j t', we 
also obtain that v 1 ^ t', so v' \\— -><ft'- Using T3, this yields v' \\— -^{Ki<tf i U iff), and again 



we have (||). Using Lemma \A, we obtain that h => 0[<5>f t V (->Ki$+i A ->{K i ^t i U <&))]. 



Applying Lemma 4J5 to this and the result of the preceding paragraph establishes that h 3> s 



It follows using Lemma gj(b), R2, and K2 that s ||- ^-.(iQ^ £/ By 
KT3, we obtain s \\- ^(K^^ A 0(-£Q$J A Lnp t >)). Since, by Lemma||b), s ||- we 
obtain using T2 that s ||— Q^(Ki^f { A Lnp t i)). Because s — » t, we have that 92,5 A 0<A 



is consistent, so it follows that ipt A -i(l£j<l>^ 4 A Liip t i) is consistent. But, by Lemma 4.3, 
t \\— Ki<&~T- A Liip t i, so this is a contradiction. | 

We are now ready to define, for each consistent tp, an enriched" 1 " system for ip that es- 
tablishes completeness of S5^ + KT3 with repect to . The runs of this system are those 
derived from the acceptable sequences (sq, si, • • •) (of states for iff) by putting r e (n) = s n and 
rj(n) = Oj(so)# • • • #Oi(s n ), for each agent 2 and re > 0. Thus, rj(re) is the sequence of current 
information that agent i has had up to time n. Let 7Z pr be the set of runs defined in this way. 
The function £ is given by E(r, n) = s n for each re > 0. 

Lemma 5.6: Suppose that the axiomatization includes KT3. Then (JZ pr , S) is an enriched^ 
system. 



Proof: It is clear that (7Z pr ',£) satisfies Conditions 1 and 2 of Definition [Oj. It remains to 
show that Condition 3' holds. So suppose that £(r, re) is a u-state and E(r, re) ~, s for some 
(cr#i)-state s. We must find a point (r',n') such that £(r',n') = s. 

The proof proceeds by induction on re. The result for re = is immediate, since we can 
take r' to be an acceptable sequence starting from s (such a sequence exists by Lemma |Q| ), so 
£(r',0) = s and clearly (r, 0) ~j (^',0). 

Now suppose n > and the result holds for re — 1. Because £(r, re — 1) — > S(r, n) and 



S(r, n) ~j s, it follows by Lemma 5J3 that either (a) E(r, re — 1) ~j s or (b) there exists a (a#i)- 
state s' such that S(r, n — 1) «j s' and there exists a sequence of (<r#i)-states uq — > u\ — > . . . — *• 
such that s' — > reo, re/ «j re; + i for i = . . . k — 1, and ut = s. By the induction hypothesis, 
there exists for any (cr#z)-state t with S(r, re— 1) ~j i a point (r', n r ) such that (r, re— 1) ~j (r', re') 
and £(r', re') = i. In case (a), we take t = s, and we then have that S(r, re — 1) ~j £(r, re) and 
E(r',re') = s. It follows that (r, re) ~j (r',re — 1), and by the transitivity of ~j, we also have 
(r, n) ~j (r', re'). Hence we are done. In case (b), we take t = s'. Suppose that r' is derived from 
the sequence (vq,vi, . . .). Let r" be any run derived from an acceptable sequence with initial 



segment (vq, . . . , v n >, uq, . . . , n^). Again, such a run exists by Lemma 5A.. By construction, 
S(r",n' + k + 1) = Uk = s. Moreover, since rf(n') = r t '(n') = r,i{n — 1) and Oi(ui) = Oi(s) for 
all I = 0, . . . ,k, we have rf (re'+fc+l) = rf(re')#Oi(re )# . . . #0;(u fe ) = ri(n-l)#Oi(s) = r<(n), 
and hence (r, re) ~j (r", n' + + 1). | 
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Now take any e-state s such that s \\— ip, and let r be a run derived from an acceptable 
sequence starting with s. By construction, the system T obtained from the enriched" 1 " system 
is in , and by Corollary 4.11 , we have (T, r, 0) |= ip. Thus, tp is satisfiable in . By 
Lemma ip is also satisfiable in systems in C^' ms . Since this argument applies to any 



formula ip consistent with respect to S5^ + KT3, this completes the proof of Theorem £^4 



5.3 Dealing with C%> sync and C%' sync > ms (Theorem gj ) 



We now show that S5^ + KT2 is sound and complete with respect to KL m for the classes of 
systems C^ ,sync and £P^> s 2/ nc > ms . p or soundness, the following result suffices. 



Lemma 5.7: All instances of KT2 are valid in C^' sync . 



Proof: Let I be a system in C^' sync and let r be a run of I. Suppose that (I, r, n) \= KiQip. 
If (r, n + 1) ~j (r',n'), then by synchrony we must have n' = n + 1. Thus, by perfect recall 
and synchrony, we have (r,n) ~j (r',n' — 1). It follows that (Z,r',n' — 1) \= Qip, which implies 
that (l,r',n') \= ip. This shows that (T,r',n') \= ip for all (r',n') ~j (r,n + 1). Thus, we have 
(I, r, n + 1) |= Knp, and hence (1, r, n) \= QKi<p. I 

Before constructing an enriched + system for the completeness part, we first note a property 



of the pre- model, analogous to Lemma 5.5 



Lemma 5.8: Suppose that the axiomatization includes KT2. Then for all a-states s,t with 
s — > t, we have that for all (a^pi) -states t' with t t' there exists a {a^pi) -state s' such that 
s ~, s' and s 1 —t t'. 



Proof: By way of contradiction, suppose that s, t are a-states with s — > t that t' is a (<r#i)-state 
such that t ~i tf, but that for all (<r#z)-states s' such that s ~j s', we have that s' \\— —<Q)ipt'- 



By T2, we have that s' \\— O^ft' for all (o"#z)-states s' such that s Rij s' . By Lemma 4.3(b), 
it follows that s \\— KiQ^ip t /. By KT2, we have that s \\— O-^Q^Vf • Since s — > t, it follows 
that A Ki—Kptf is consistent. However, since t ~j t', by Lemma |4.3| (c), we have t ||— Liiff. 
This is a contradiction. | 

To construct the enriched + system, we now take TZ pr ' sync to be the set of runs r derived 
from acceptable sequences (so,si, . . .) of states for the formula ip by putting r e (n) = s n and 
ri(n) = Oj(so) • • • Oi(s n ), for each agent i and n > 0. The notation Oj(so) ■ . . Oi(s n ) is meant 
to denote the sequence formed by concatening Oi(so)> Oi(si), . . . , Oi(s n ). Thus, the length of 
the sequence is n+ 1, which enforces synchrony. Again, the function S is given by S(r, n) = s n 
for each n > 0. 



Lemma 5.9: Suppose that the axiomatization includes KT2. Then {JZ pr > sync , S) is an enriched^ 
system. 

Proof: Conditions 1 and 2 of the definition of an enriched" 1 " system are immediate. To show 
that Condition 3' holds, suppose that E(r, n) is a c-state, and t is a (<r#i)-state such that 
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£(r, n) f»j t. Suppose that r is derived from the acceptable sequence (so, s\, . . .), so S(r, n) = s n . 
It follows from Lemma SJS that there exists a — ^--sequence to — * • • • ~~ * t n such that t n = t and 
n. By Lemma 5.1, this sequence may be extended to an infinite acceptable 

and 



sj tj for j = l. 

sequence. Taking r' to be the run derived from this sequence, we see that (r, n) ~« (r',n) 
E(r',n) =t. | 



Take z pr ' sync to be the system obtained from (JZ pr ' sync , £). By construction, this system 
is in C pr ' sync . Now take any e-state s such that s ||— ^, and let r be a run derived from an 
acceptable sequence starting with s. By construction, the system X obtained from the enriched + 
system is in C p ^ ,sync , and by Corollary 4.11, we have (X,r, 0) (= ■0- Thus, ^ is satisfiable in 
C^[' sync . By Lemma 5.3, ?/> is also satisfiable in systems in Qpr> s v nc ^ ms _ Since this argument 



applies to any formula ^ consistent with respect to S5^ + KT2, this completes the proof of 



Theorem 3.5 



5.4 Dealing with C™ (Theorem gyp 



We want to show that S5^ + KT4 is sound and complete for KL m with respect to C%*. For 
soundness, it suffices to show that KT4 is valid in C^. This is straightforward. 

Lemma 5.10: All instances of KT4 are valid in C^. 

Proof: Suppose that X G C^f and (X, r, re) \= KiipU Kiip. We want to show that (X, r, n) (= 
Ki(KitpU Kitp). Thus, if (r',n') ~j (r, n), we must show that (X, r', re') \= KiipU Kitp. Since 
(X, r, n) |= Knp U Kitp, there exists I > n such that (X, r, Z) |= if and (X, r, fc) |= Knp A ^Kiip 
for all A; with n < k < I. Note that this means that if re < k < I, then rj(Zv) ^ rj(Z). Since 
X G C^f and (r, n) ~j (r', n'), there must be some Z' > n' such that ((r, n), . . . , (r, /)) is ~j- 
concordant with ((r, n'), . . . , (r, Z')). Thus, there exists some Zt, a partition Si, ■■■,Sh of the 
sequence ((r, n), . . . , (r, Z)), and a partition T\, . . . , T\ t of the sequence ((r', re'), ... , (r, Z')) such 
that for all j = 1, ... , Zi, we have (r, Zc) ~j (r', k') for all points (r, k) G Sj and (r', Ze') G Tj. It 
easily follows that (X, r', re') |= K^p U K^ip, as desired. I 

For completeness, we define an appropriate enriched" 1 " system. As we shall see, the demands 
of no learning make this a little more subtle than in the case of no forgetting. 

For the remainder of this section, consistency and provability are with respect to a logic 
that includes S5^ + KT4. Fix a consistent formula ip such that ad(ip) = d. 

Our first step is to prove an analogue of Lemma [Tf]. 

Lemma 5.11: Suppose that the axiomatization includes KT4- If s is a a -state, t is a (o~#i)- 
state, s ~j t, and s — > s' , then there exists a sequence to,... such that (a) t = to, (b) tj ~j s 
for j < k, (c) tj -> t j+ i for j < k, and (d) s' RS f t k . 

Proof: If s' ~j t, then we can take the sequence to consist only of t, and we are done. Otherwise, 
since p s AQp s ' is consistent, it follows from Lemma p~3|(b) that (p s AKi$g i U Ki<&^, i is consistent. 
Moreover, by Lemma (L^(c), we have that tp 3 \\— Lnp t - Thus, p s A Lnp t A K^ 3i U Ki<&^, i is 
consistent. Using KT4, it follows that tptAKi$~T i U Ki<&^, ■ is consistent. The result now follows 



from Lemma 4.7. | 
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Unfortunately, Lemma 5.11 does not suffice to construct an enriched + system. Roughly 



speaking, the problem is the following. In the case of perfect recall, we used Lemma |5.5| to show 
that, given a — ^-sequence S = (sq, . . . , s n ) of cr-states and a (cr#i)-state t such that s n «j t, we 
can construct a — ^-sequence T of (cr#z)-states ending with t such that 5 is «j-concordant with 
T. There is no problem then extending T to an acceptable sequence. Moreover, we can extend 
S and T independently to acceptable sequences; all that matters is that the finite prefixes of 
these sequences — namely, S and T — are ~j-concordant. With no learning, on the other hand, it 
is the infinite suffixes that must be ^-concordant. Given a ^-sequence 5 = (sq, . . .) of cr-states 



and a (cr#z)-state t such that sq £Sj t, using Lemma p.llj we can find a — ^--sequence T starting 
with t that is ~j-concordant with S. This suggests that it is possible to find the appropriate 
sequences for the construction of runs satisfying the no learning condition. Unfortunately, it 
does not follow from the acceptability of S that T is also acceptable. This makes it necessary 
to work with a smaller set of sequences than the set of all acceptable sequences, and to build up 
the sequences S and T simultaneously. To ensure that the appropriate obligations are satisfied 
at all points in the set of runs constructed, we need to work not just with single states, but 
with trees of states. 

A k-tree for ip (with k < d) is a set S of cr-states for i/j with |c| < k with a unique e-state 
such that if s G S is a c-state then 

• if t is a (cr#i)-state such that s ~j t and \o~#i\ < k, then t G S, 

• if a = T#i, then there is a r-state t in S such that s ~i t. 

We extend the — > relation to A;-trees as follows. If Si and S2 are fc-trees for ip, then Si — ►/ S2 
if / is a function associating with each cr-state s £ Si a finite sequence of cr-states in Si U S2 
such that 

• if f(s) = (s ,...,s k ), then 

- S = Sq, 

- s ->■ > s k , 

- s , ... , G Si and s k G S 2 ; 

• if s ~j s', then /(s) and f(s') are ~j-concordant; 

• for at least one s G Si, the sequence f(s) has length at least 2. 

Given two sequences of cr-states a = (sq, . . . , s&) and /3 = (irj, • • •)) where a is finite, the 
fusion of a and /3, denoted a • j3 is defined only if s^ = io! i n this case, it is the sequence 
(so, Sjt_i,to; • • •)• Given an infinite sequence <S = So — >f Si — ^ ^2 — >/ 2 ... of /c-trees, we say 
a sequence a of cr-states is compatible with S if there exists some h, and cr-states Sh, • • • 

with Sj G Sj- for j > h, such that a = fh(sh) ■ • • • •• (Implicit in this notation is the 

assumption that this fusion product is defined, so that the last state in fj(sj) is the same as the 
first state in fj + i(sj + i), for j > h.) A — ^-sequence (to,ti,...) of cr-states is a compression of 
(so, si, . . .) if (1) to = so, and (b) if tj = Sh, then tj + i is s^', where /i' is the least integer greater 
than h such that Sh'-i — > s^/ and % = ••• = s^_i. (If no such /i' exists, then tj is the last 
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element of the compression.) S is acceptable if every — ^--sequence that is a compression of some 
sequence compatible with S is infinite and acceptable. Our goal is to construct an acceptable 
sequence of d-trees; we shall use this to define the enriched" 1 " system. 



Note that by Lemma 4.3, the formula ip s essentially describes the subtree below s of any 
/c-tree containing s. Given a A-tree S and a a-state s in S, we inductively define a formula 
trees t s that describes all of S from the point of view of s. If s is an e-state, then trees, s = fs- 
Otherwise, if s is a (r#i)-state, where r ^ T#i, then 

tree s , s = (f s A f\ Litree s ,t- 

{t— states t: s~it} 

If S and T are A-trees, s £ S, and t 6 T, then we write (S, s) — > + (T, i) if there exists a 
sequence of &-trees So, . . . ,Si and functions fo, . . . , such that So — >f • • • —►/,_! 5"/, So = S, 
S/ = T, /j-(s) = (s) for j < I - 2, and /z-i(s) = (s,i). 

Lemma 5.12: Suppose that the axiomatization includes KT4, S is a k-tree, and s is a a -state 
in S, where \a\ = k. 

(a) If t is a a-state and trees )S A CX^t A £) is consistent, then there exists a k-tree T such that 
t 6 T, (5, s) — > + (T, i) 5 and treex,t A ^ is consistent. 

(b) tree s , s OV{(T,t): (S,«)-»+(T,t)} iree T,t is provable. 

(c) If trees, s AtpUip' is consistent, then for some I > i/iere is a sequence So,..., Si of 
k-trees and states sq,...,si such that (i) Sj G Sj, (mJ (S, s) = (So,so), (Hi) {Sj> s j) 
(Sj+i, Sj+i) for j = 0, — 1, (i-uj trees^sj A 99 is consistent for j = 0, . . . ,1 — 1, and 
(v) trees u si Ay?' is consistent. 



Proof: We proceed by induction on fc. The case that A; = is immediate using standard 
arguments, since then trees )S is just tp s . 

So suppose k > and cr = r#i, with a ^ t. We first prove part (a) in the case that £ is 
of the form -fQ£', then part (b), then prove the general case of (a), and then prove (c). First 
consider (a) in the case that £ is of the form K^' . Note that trees, s A 0{<Pt A implies 
trees, s A Ki& s ,i U A From the definition of fe-tree, it follows that there is a r-state s' 
in 5 such that s ~j s'. Let S' be the (A;— l)-tree consisting of all er'-states in S with \o~'\ < k — 1. 
From KT4, it follows that 

trees* j A K^ s4 U K^' A $ M ) 

is consistent. Applying part (c) of the inductive hypothesis, we get a sequence So,. ..,Si of 
(A; — l)-trees and states so, ■ ■ ■ ,si such that (i) Sj G Sj, (ii) (S 1 , s') = (So, so), (iii) (Sj, Sj) ^ + 
(Sj+i, Sj + \) for j = 0, . . . , I — 1, (iv) trees^sj A Ki<f> Sj i is consistent for j = 0, . . . , Z — 1, and (v) 
trees u si A A $t,i) is consistent. It follows by definition that there is a sequence To, ... , T m 
of (k — l)-trees and functions /o, • • • , fm-i such that To — >/ — ► ■ ■ • "^/ m _i T m , To = So, and 
T m = 5/. Moreover, there are elements to,...,t m such that to = s', t m = si, if j < m, 
then tj = Sj/ for some j' < j, and if = ij+i, then fj(tj) = (tj), while if t,- 7^ £j+l> then 
fj(tj) = (tj,t j+1 ), for j = 0, . . . ,m - 1. 
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Let Tj be the unique k-tree extending Tj, for j = 0, . . . , m. Since tpt j A K^ s i is consistent 
for j < m, we have that tj «j s, and so s € Tj for j < m. Similarly, we have that t € T' m . 
We now show how to construct /j, for j < m. For each state v! € Tj — Tj, there must exist a 
state -u E Tj and an agent such that u -u'. (There may be more than one such state it, 
of course. In this case, in the construction below, we can pick u arbitrarily.) It easily follows 



from Lemma 5.11 that there exists a sequence a u i starting with u' that is ~j/-concordant with 
fj(u). Moreover, we can take at j = (s) for j < m — 1, and take a; m _ 1 = (s,t). We define /j so 
that it agrees with fj on Tj, and for each v! G Tj — Ty, we have f'j(u') = a u >. 

Notice that Tq = 5. If m > 0, it follows immediately from the definition that {S, s) — > + 
(T m ,t), and that treeT m) t A K^' is consistent. If m = 0, it is easy to check that we must have 
t £ S, for we have s' ~j t. Since we also have s' ~j s, it follows that s ~i t. Define / so 
that /(u) = (u) for u / s and /(s) = (s,t). Then (5, s) — >/ (S,t). Since s — > t, we have 
(S 1 , s) — > + (jS, t). This completes the proof of part (a). 

To prove part (b), suppose not. Then trees lS A OA{(T,t);(S,j)-t+(T,f)} -<treeT,t is consistent. 
Straightforward temporal reasoning shows that there must be some u such that 

tree s , s A 0((f u A f\ ^tree T ,t) (3) 

{(T,t):(S,»)-»+(T,t)} 

is consistent. Now -itreexj is equivalent to -xpt V V{ T -states t': ^i^ ree T,t' ■ Thus, it follows 
that the consistency of (|3|) implies that for each tree T such that (S,s) —> + (T,u), there is a 
r-state tx ~« u such that 

tree s , s A 0(<p u A Ki( f\ -<tree T ^t T )) (4) 

{T: (5, S )-^+(T, U )} 

is consistent. By part (a), there exists a /c-tree T' and € T' such that (5 1 , s) — > + (T',t ! ) and 
tre&r'^' A A Ki(f\r T , (s, s )-*+(T,«)} ~^t ree T,t T ) is consistent. But this means that t' = n. Thus, 
we have a contradiction, since treeT>, u A K^treeT' \t T , is inconsistent. 

The general case of (a) follows easily from (b). Part (c) also follows from part (b), using 



arguments much like those of Lemma 4.7; we omit details here. I 



Lemma 5.13: Suppose that the axiomatization includes KT4 and tp is consistent. Then there 
is an acceptable sequence of d-trees such that ip is true at the root of the first tree. 

Proof: The key part of the proof is to show that given a finite sequence 5o — >/ ... —►/,_! Si 
of d-trees and a cr-state s in Si such that s \\— Qip (resp., s \\— ip\ U ^2), we can extend the 



sequence of trees in such a way as to satisfy this obligation. This follows easily from Lemmas 5.11 



and 5.12. In more detail, suppose s \\— (fx U (f2- Let S' be consist of all r-states in Si, with 



t| < k = \a\. By Lemma 5.12, we can find a sequence of A:-trees starting with S' that satisfies 



this obligation. Using Lemma 5.11, we can extend this to a sequence of d-trees starting with Si 
that satisfies the obligation. The argument in the case that Sk \\— 0<p is similar. We can then 
take care of the obligations one by one, and construct an acceptable sequence, in the obvious 
way. 

Since tp is consistent, there must be some tree S with root so such that sq \\— ip. We just 
extend S as above to complete the proof. I 
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Once we have an acceptable sequence S of d-trees as in Lemma 5.13, we can easily con- 
struct the enriched -1 " system much as we did in the case of perfect recall. Given a — ^-sequence 
so —> s% — > ... the nl-run r derived from it is defined so that r e (n) = s n and rj(n) = 
Oi(s n )#Oi(s n +i)# . . ., for each agent i and n > 0. Thus, while for perfect recall, we take 
rj(n) to consist of the agent's current information up to time n, for no learning, we take rj(n) 
to consist of the current information from time n on. The construction stresses the duality 
between perfect recall and no learning. Let lZ nl consist of all the n£-runs derived from — >- 
sequences that are compressions of sequences of states compatible with S. Again, the function 
S is given by E(r, n) = s n for each n > 0. 

Lemma 5.14: Suppose the axiomatization includes KT4- Then (TZ nl ,T,) is an enriched^ sys- 
tem. 

Proof: Again, Conditions 1 and 2 in the definition of enriched" 1 " system follow immediately 
from the construction. For Condition 3', suppose that (r, n) is a point in the system, S(r, n) is 
a er-state, and s is a (cr#i)-state with s ~j S(r, n). Suppose S = So — ►/„ <5i — >fa 5*2 — */ 2 • • •• By 
definition, the run nl-rxm r is derived from the compression of some sequence (sq, s±, S2, • • •) of 
ex-states compatible with S. Suppose S(r, n) is in the interval of this sequence from S^. Then 
s must also be in Sj-- Let (to,ti, . . .) be the (unique) sequence compatible with S that starts at 
s in Sk. Let r' be the run derived from the compression of this sequence. Then, by definition, 
we have S(r', 0) = s and (r, n) ~, (r',0). I 

Take X nl to be the system obtained from (TZ nl ,Ti). By construction, this system is in C nl . 
Now take any e-state s such that s ||— ip, and let r be a run derived from the compression of a 
sequence compatible with S starting with s. It follows that (I, r, 0) |= ip. Thus, ip is satisfiable 



in C%1. This completes the proof of Theorem 3.6 



5.5 Dealing with C%> pr and Cf ' pr ' uis (Theorem Q 



We now want to show that S5^ + KT3 + KT4 is sound and complete for KL m with respect to 
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Cm' pr . Soundness is immediate from Lemmas 5.4 and 5. 10| . 



For completeness, we construct an enriched + system much as in the proof of Theorem |_ 
using k-tvees. By Lemma 5.13| , there is an acceptable sequence S of d-trees such that tp is true 



at the root of the first tree. Given a — >-sequence (sq, s\, ....), the nl-nf run r derived from it is 
defined so that r e (n) = s n and r^n) = (Oi(s )#Oj(si)# . • • #Oj(s n ), Oi(s n )#Oi(s n+ i)# ...), 
for each agent i and n > 0. Thus, the agents' local states enforce both perfect recall (by 
keeping track of all the information up to time n) and no learning (by keeping track of the 
current information from time n on). Let TZ nl ^ r consist of all nl-nf-runs that are derived from 
—►-sequences that have a suffix that is the compression of a sequence of states compatible 
with S. Note that now we consider — ^--sequences whose suffixes are compressions of sequences 
compatible with S. The reason to allow the greater generality of suffixes will become clear 
shortly. Since S is acceptable, it is easy to see that every such — ^-sequence must be infinite and 
acceptable. Again, the function S is given by S(r, n) = s n for each n > 0. 

Lemma 5.15: Suppose the axiomatization includes KT3 and KT4- Then (JZ nl,pr , E) is an 
enriched^ system. 
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Proof: As usual, Conditions 1 and 2 in the definition of enriched" 1 " system follow immediately 
from the construction. For Condition 3', suppose that (r, n) is a point in the system, S(r, n) is a 

cr-state, and s is a (cr#i)-state. Suppose cS = So —*f Si — >fc 52 — >/ 2 By definition, the run 

ni-pr-run r is derived from a — ^--sequence (so, si, . . .) that has a suffix (sat, sjv+i, ■ ■ •) that is the 
compression of some sequence (to, ti, ti, ■ ■ ■) of cr-states compatible with S, and S(r, n) = s n . 
There are now two cases to consider. If n > N, then there exists some k such that s n is in 
Then s must also be in S^. Let (uq,ui, . . .) be the unique sequence compatible with S that 
starts with s in Sk- By Lemma |5.5| , there exist <r#z-states uo — *■ ■ " — *■ v h such that Vh = s 
and (vq, . . . , Vh) is ^-compatible with (so, . • • , s n ). Consider the — ^-sequence formed from the 
fusion of (vq, . . . , Vh) and the compression of (uo,Ui, . . .). By construction, the nl-pr-run r' 
derived from this — ^-sequence is in TZ nl,pr , T,(r',h) = s, and (r, n) ~i (r',h). 

Now suppose n < N. By Lemma [5l| there exist (<7#i)-states — ► ■ • • — > % such that 
Vh = s and (-uo> ■ ■ • , ^ft) is ~j-concordant with (so,...,s n ). Moreover, by Lemma |5.11| , this 
sequence can be extended to a sequence (vq, ■■■■Vk) that is PSj-concordant with (so, sjv)- Since 
sn G Sm for some M, we must have Vk G Sm- Let (wo,Wi,...) be the unique sequence 
compatible with S that starts at v^ in Sm- Consider the ^-sequence formed from the fusion 
of (vq, . . . , Vk) and the compression of (uq,ui, . . .). By construction, the nl-pr-run r' derived 
from this -^-sequence is in TZ nl,pr , E(r', h) = s, and (r, n) ~j (r', /i). | 

Again, we complete the proof by taking X nl,pr to be the system obtained from (TZ nl,pr , S). 
By construction, this system is in C nl ' pr and satisfies This shows that S5^ + KT3 + KT4 is 
a sound and complete axiomatization for the language KL m with respect to CJ^ ,pr for all m. 

The fact that it is also a sound and complete axiomatization for the language KL\ with 
respect to Q™ l ' pr ' ms follows immediately from the following lemma. 

Lemma 5.16: The formula tp G KL\ is satisfiable with respect to C™ l,pr (resp., c™ l 'P r > s v nc ) ^jj 
it is satisfiable with respect to L l (resp., L l J. 

Proof: Clearly if if) is satisfiable with respect to Q™ l 'P r > uis (resp., Q™ l >P r > s v nc > ms ^ is satisfiable 
with respect to C"'> pr (resp., c™ l > pr > s y nc y p or the converse, suppose that (X, r*,n*) \= ip, where 
X = (TZ,tt) G C"'' pr . For each run r 6 K, define the run r + just as in Lemma |5.3| , to be 
the result of adding a new initial state to r. Let TV = {r + : (r, 0) ~i (r*,0)}. Define 7r' 



as on 7?-' as in Lemma 5.3 , so that ir'(r + , 0)(p) = false for all primitive propositions p, and 
ir'(r + , n + 1) = 7r(r, n). Let X' = (TV, ir'). Clearly 2' G C™ ' pr ' ms ^ an d if X is synchronous, then 
so is X'. We claim that (X',r + ,n + 1) |= </? iff (X, r, n) \= ip for all formulas </? G KL\ and all 
r + G TV. We prove this by induction on the structure of <p. The only nontrivial case is if <p is 
of the form Kiip' . But this case is immediate from the observation that if r + G TV, r' G TZ, and 
(r, n) ~i (r',n'), then since X is a system of perfect recall, we must have (r, 0) ~i (r',0), and 
hence (r') + G 7£'. We leave details of the proof of the claim to the reader. From the claim, it 
follows that -0 is satisfiable in ,pr,ms } and that if ip is satisfiable in C™ > pr > s y nc ^ then it is also 
satisfiable in C ? l ' pr ' sync > ms . | 
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5.6 Dealing with C^ sync (Theorem Q 



We now want to show that S5^ + KT5 is sound and complete for KL m with respect to C^l' sync . 
Soundness follows from the following lemma. 

Lemma 5.17: All instances of KT5 are valid in C^' sync . 

Proof: Suppose I G C!^' sync and (l,r,n) \= QKiip. We want to show that (J, r, n) \= KiQ<p. 
Thus, suppose that (r 1 ,n') ~j (r,n). We must show that (2,r',n') \= Q(p. By synchrony, we 
must have n' = n. Moreover, by no learning and synchrony, we have that (r, n + 1) ~, (r' , n + 1). 
Since (Z,r,n + 1) |= Knp, it follows that (I,r',n + 1) |= (p, and hence that (l,r',n) \= Qip, as 
desired. I 

For completeness, we construct an enriched + system much as in the proof of Theorem 
using /c-trees, with an appropriate strengthening of the — > relation. 



We start by proving the following analogue of Lemma 5.11 



Lemma 5.18: Suppose that the axiomatization includes KT5. If s is a a-state, t is a (er#i)- 
state, s «j t, and s — > s' , then there exists a (a#i)-state t' such that t—*i! and s' t' . 



Proof: Since ip s A Ow is consistent, it follows from Lemma [4.3| (b) that ip so A O-^i^V i is 
consistent. Moreover, by Lemma fO| (c), we have that ip a \\— Lfipf Thus, ip s A L^ipt A QKi$>^, i 
is consistent. Using KT5, it follows that ip s A Litp t A KiQ^, i is consistent. It follows that 
ipt A O*^ i is consistent. Hence, there is some (<r#i)-state t' such that s' t' and ip t A Ow 
is consistent. Thus, we have s' ~j t' and t — > t'. I 

If S and T are k-trees, s £ S, and t G T, we define (5, s) ^™ c <+ (T, t) if 5 — *•/ T for 
some / such that /(s) = (s,t) and /(s ; ) has length 2 for all s' G S. We now get the following 
simplification of Lemma |5.12| . 

Lemma 5.19: Suppose that the axiomatization includes KT5, S is a k-tree, and s is a a-state 
in S, where \o~\ = k. 

(a) If trees )S A 0(<pt A £) is consistent, then there exists a k-tree T and t G T such that 
(S, s) — >^ nc >+ (T, t) and treeT,t A £ is consistent. 

(b) tree s , s => OV{(T,t): (5,«)-»"v» c .+(T,i)} iree T,t is provable. 

(c) If treeg s A <pU tp' is consistent, then there is a sequence Sq, . . . ,Si of k-trees and states 
so, . . . , si such that (i) Sj G Sj, (ii) (S, s) = (So, so), (Hi) [Sj, Sj) — > s ^ nc ' + (Sj+i, Sj+i) for 
j = 0, — 1, (w^ trees ^ s ■ Aip is consistent for j = 0, . . . ,1 — 1, and (v) trees l:Sl A </?' is 
consistent. 



Proof: The proof is like that of Lemma 5.12 , using Lemma 5. IE instead of Lemma 5.11 . We 
leave details to the reader. | 
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We can then define a sync-acceptable sequence of trees by replacing by — > s y nc ' + in 



the definition of acceptable sequence of trees. Using Lemma |5,19j we can show that if the 



axiom system contains KT5, then we can construct an infinite sync-acceptable sequence S 



S —> s y nc '+ Si —> s y nc '+ 5 2 —, s v nc ^+ ... of d-trees. As in Section |5T|, we use an object x not equal 
to any state. Given a — ^-sequence sn — > Siv+i . starting at sn G Sn the nl-sync-run r 
derived from it is defined so that r e (n) = s n for n > N, else r e (n) = x, and for each agent i, 
if n > N then n(n) = (n, Oj(s n )Oj(s n+ i) . . .), else nin) = (n,x N ~ n Oi(s n )Oi(s n+1 ) . . .). Thus, 
the local state of the agent enforces synchrony (by encoding the time) and enforces no learning. 
Let TZ nl ' sync consist of all nl -sync-runs derived from — ^-sequences compatible with S, and define 
S by taking S(r, n) = s n for n > N and S(r, n) undefined for n < N. 

Lemma 5.20: Suppose the axiomatization includes KT5. Then (lZ nl ' sync ,Y?) is an enriched^ 
system. 



Proof: The proof is essentially the same as that of Lemma 5.14 . We leave details to the reader. 
I 

We complete the proof of Theorem [D] just as we did all the previous proofs. 
5.7 Dealing with C^' pr > sync (Theorem EO) 



We now want to show that S5^ + KT2 + KT5 is sound and complete for KL m with respect to 
Qni,pr,sync _ Soundness follows from Lemmas 15?^ and 15.17. 



For completeness, we construct an enriched" 1 " system by combining the ideas of the proofs 
of Theorems and |3.8| . Using Lemma 5,19| , we can show that if the axiom system contains 



KT5, then we can construct an infinite sync-acceptable sequence S of d-trees. Given a — >- 
sequence sq — > s\ — > . . ., the nl-pr -sync-run r derived from it is defined so that r e (n) = s n 
and ri(n) = (Oj(si) . . . Oi(s n ), Oi{s n )Oi{s n+ \) . . .). Thus, the local state of the agent enforces 
both no forgetting and no learning. It also enforces synchrony, since the agent can determine 
n from the length of the first of the two seqeunces in its local state. Let T^ n ^P r > s y nc consist of 
all nl-pr- sync-rxms derived from — >-sequences with suffixes that are compatible with S; again, 
we define S by taking E(r, n) = s n . 

Using ideas similar to those in earlier proofs, we can now prove the following result. 

Lemma 5.21: Suppose the axiomatization includes KT2 and KT5. Then (JZ nl ' pr,svnc ,Y*) is an 
enriched^ system. 



We complete the proof of Theorem [3J3 just as we did the earlier proofs. 
5.8 Dealing with q£> sync > uis and C%' pr > sync > uis (Theorem |!LT0|) 

Finally, we want to show that S5^ + KT2 + KT5 + {Kisp = Knp} is sound and complete for 
KL m with respect to C^ sync,ms and c%l ,pr ' sync ' ms ■ Soundness follows easily using the following 
result, which is Proposition 3.9 in [ HV89| (restated using our notation). 



Proposition 5.22: 
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fn ) fnl,sync,uis s~inl,pr,sync,uis 

( U J ~ °m 

(b) Any formula ip in KL m is equivalent in c^ s v nc ^ ms i fog formula ip' that results by re- 
placing all occurrences of K{, i > 2, by K\. 



It follows from part (a) of Proposition |5.22 that the same axioms characterize c^ ,sync ' ms and 
C nl, P r,sync,uis _ Now uging Theorems |^ and |l7| , the soundness of KT2 and KT5 follows. The 
soundness of Knp = K\ip follows from part (b). 

For completeness, using the axiom = Kif, it suffices to show the completeness of 



S5f +KT2+KT5 with respect to C\ 

with respect to Q^P r > s y nc m The result now follows using Lemma [5.16 



nl,pr,sync,uis 



By Theorem 3.9, this axiomatization is complete 



6 Remarks on No Learning 

We noted in Section ^ that the definition of no learning adopted in this paper differs from that 
used in flHV86| , pV89| . We now comment on the reason for this change and the relationship 
between these alternative definitions of no learning. 

First, recall from part (d) of Lemma 2.2 that that agent i has perfect recall in system TZ if 
and only if 

(*) for all points (r, n) ~j (r 1 , n') in 1Z, if k < n, then there exists k' < n' such that (r, k) ~j 
(r',*/)- 

Intuitively, no learning is the dual of perfect recall, so it seems reasonable to define no learning 
by replacing references to the past in a definition of perfect recall by references to the future. 
This was done in [ HV86| , HV8S| 1 , where the definition given for no learning was the following 
future time variant of condition (*), which we call no learning', to distinguish it from our current 
definition: Agent i does not learn' in system 1Z if and only if 

(**) for all points (r, n) ~j (r', n') in 1Z, if k > n then there exists k' > n' such that (r, k) ~j 
(r',k'). 

The following lemma states a number of relations holding between condition (**) and the other 
properties we have considered in this paper. 

Lemma 6.1: 



(a) If agent i does not learn in system 1Z then agent i does not learn' in system 1Z. 

(b) If system 1Z is synchronous or if agent i has perfect recall in TZ, then agent i does not 
learn in TZ iff agent i does not learn' in TZ. 

Proof: We first show (a). Suppose that agent i does not learn in TZ. Assume that (r, n) ~j 
(r',n') and let k > n. Since i does not learn, the future local state sequences at (r, n) and 
(r',n') are equal. It follows that there exists k! > n' such that (r, k) ~j (r',k'). Thus, agent i 
does not learn'. 
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For (b), it follows from part (a) that it suffices to show the implication from no learning' to 
no learning. We consider the cases of synchrony and perfect recall independently. In each case, 
we show that if (r, n) ~j (r', n') then there exists k > n' such that the sequences ((r, n), (r, n+1)) 



and ((r',n') . . . (r', k)) are ~j-concordant. It then follows by Lemma ~L2. that agent i does not 
learn. 

Assume first that 7Z is a synchronous system, and that (r, n) ~j (r',n'). By synchrony, 
we must have n = n' . By no learning', there exists k > n such that (r, n + 1) ~, (r', k). By 
synchrony, k must equal n + It is immediate that ((r, n), (r, n + 1)) and ((r', n'), (r', n' + 1)) 
are ~j-concordant. 

Next, assume that agent i has perfect recall in 71, and that (r, n) ~j (r', n'). By no learning', 
there exists k > n' such that (r, n+1) ~j (r', k). By perfect recall, agent i's local state sequences 
(r, n + 1) and (r', fc) are identical, as are the local state sequences at (r, n) and (r', n'). It follows 
that the sequences ((r, n), (r, n + 1)) and ((r', n'), . . . , (r', /c)) are ~j-concordant. | 

Thus, in the context of either synchrony or perfect recall, no learning and no learning' are 
equivalent. However, in systems without synchrony or perfect recall, no learning' is strictly 
weaker than no learning, as the following example shows. Consider the system 7Z = {r 1 , r 2 } for 
a single agent, where the runs are defined by: 

if n = 

r 1 (n) = < (s e , b) if n > is odd 




if n > is even 

where s e is some state of the environment, and a,b,c are local states of agent 1, and similarly 

{(s e , a) if n = 
(s e , c) if n > is odd 
(s e , d) if n > is even 

This system clearly satisfies uis and condition (**), so we have no learning' (for both agents). 
However, agent l's future local state sequences from the points (r , 0) ~i (r 2 ,0) are not ~i- 
concordant, so we do not have no learning. Thus, no learning and no learning' are distinct in 
general. 

This raises the question of which of variant to take as the definition of no learning for 
the cases C nl and C ms,nl . The origin of this notion in the literature lies in Ladner and Reif's 



paper [LR86], where it is motivated as arising in the context of blindfold games. Their logic 
LLP assumes perfect recall, so is not decisive on the distinction. However, it seems that the 
behavior in the above example is somewhat unnatural for this application, and the definition 
we have adopted in this paper better fits the intuition of a player in a blindfold game following 
a fixed linear strategy, but with some uncertainty about timing. It is such examples that in 
fact led us to use the current definition of no learning. 

It is worth noting that the example above also shows that the axiom KT4 is not sound with 
respect to the class of systems satisfying (**). Define the interpretation it of the propositions 
p and q on runs r S 71 by ir(r,n)(p) = true iff ri(n) = a and ir(r,n)(q) = true iff ri(n) = b. 
Let I = (7Z,n). It is then readily seen that (X, r^O) \= K\pU K\q but not (I, r , 0) (= 
K\{K\pXJ K\q). Hence KT4 fails in this system. (This example is a future time version of an 
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example used in [Mey94] to show that the axiom KT1 is incomplete for systems with perfect 
recall.) We have not investigated the issue of axiomatization using no learning' rather than no 
learning in the two cases where there is a difference — Cj£ and ' ms . We conjecture that, while 
there will be a relatively clean complete axiomatization in these cases, it will not be as elegant 
as the one proposed here. That is, the axiom that captures no learning will be somewhat more 
complicated than KT4. This conjecture is in line with our feeling that no learning is the "right" 
definition, not no learning'. 

We remark that the complexity results of [HV86, HV8S] are proved in the context of no 
learning', but it is relatively straightforward to show that the same results hold if we use the 
definition of no learning instead. 



7 Discussion 

While we have looked in this paper at the effect on axiomatization of some combinations of 
classes of systems and language (48 in all!), there are certainly other cases of interest. One issue 
we have already mentioned is that of braching time versus linear time. Basing the temporal 
fragment of the language on branching time yields another 48 logics, whose complexity is studied 



in HV86|. We would conjecture that the obvious translations of the axioms we have presented 
here deal with branching time, with similar proofs of completeness, but this remains to be 
verified. 

It is worth remarking that our results are very sensitive to the language studied. As we have 
seen, the language considered in this paper is too coarse to reflect some properties of systems. In 
the absence of the other properties, synchrony and unique initial states do not require additional 
axioms. This may no longer be true for richer languages. For example, if we allow past-time 



operators [|LPZ85| , we need not only the additional axioms capturing the properties of these, 
but also new axioms describing the interaction of knowledge and time. Suppose that we add 
an operator such that (I,r,n) \= Qip if n > 1 and (I,r,n — 1) \= cp. Notice that -i true 
expresses the property "the time is 0" and 0-> true expresses the property "the time is 1". 
Similarly, we can inductively define formulas that express the property "the time is m" for each 
m > 0. If time=m is an abbreviation for this formula, then time = m Retime = m) is valid 
in C sync , for each time m. 

On the other hand, by adding past time operators we can simplify the axiom for perfect 
recall. Introducing the operator S for "since", we may show that the formula 

(Kw)S(K^) => Ki((Ki(p)S(Kiil))) 

is valid in C pr . This axiom very neatly expresses the meaning of perfect recall, and a comparison 
with KT4 shows clearly the sense in which perfect recall is a dual of no learning. Techniques 
similar to those developed in this paper may be used to prove that this axiom, together with 



the usual axioms for past time [LPZ85] and for knowledge, yields a complete axiomatization 
for CP r . 

Besides changes to the language, there are also additional properties of systems worth 
considering. One case of interest is the class of asynchronous message passing systems of 
[FHMV95]. That extra axioms are required in such systems is known ( [|FHMV95 l Exercise 8.8), 



but the question of complete axiomatization is still open. 
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